North Korea uses foreign IT workers to help infiltrate US companies
North Korea IT worker scheme uses third-country helpers to land US jobs See how the hiring scam fuels cyber theft, insider risk, and sanctions evasion
North Korea is relying on remote IT workers from third countries, including Iran and Lebanon, to help its operatives get hired by US companies, according to a report published Friday. Once contracts are secured, North Korean personnel are said to take over the roles.
The report says the scheme is part of a broader effort to generate money for the country’s weapons programs and to gain access to company systems. A July US government alert warned that North Korean IT workers may pose insider risks, including data theft, cryptocurrency theft, and the removal of sensitive information.
NBC reported that some workers were recruited through LinkedIn and were offered around $500 a month in cryptocurrency to act as interview assistants. The article also cited earlier reporting that North Koreanlinked hackers caused more than $2 billion in crypto losses in 2025, while the Bank of Korea estimated North Korea’s economy grew in 2025 despite sanctions.