US and allies issue alert against hiring North Korean IT workers

Washington DC - The US and 10 Asian and European allies on Friday warned companies against employing North Korean IT workers whose labor was generating crucial foreign currency to fund Pyongyang's nuclear weapons program.

The US was joined by 10 allies in issuing a warning against hiring North Korean IT workers.
The US was joined by 10 allies in issuing a warning against hiring North Korean IT workers.  © IMAGO / Pond5 Images

In a joint statement, they said the country was using skilled workers under false identities "to fund North Korea's unlawful nuclear weapons and ballistic missile programs."

In addition to the US, other countries issuing the alert included Japan, South Korea, Australia, Canada, France, Germany, Italy, the Netherlands, New Zealand and the UK.

North Korea has long insisted on its right to nuclear weapons and ballistic missile programs, although they are forbidden under the terms of UN Security Council sanctions. It enshrined its nuclear status in its constitution in 2023.

Climate change fueled devastating wildfires in France and Spain, "extremely scary" analysis finds
Environment and Climate Climate change fueled devastating wildfires in France and Spain, "extremely scary" analysis finds

The country faces a slew of international sanctions over its weapons and nuclear programs. It is believed to operate widespread cybercrime, cryptocurrency, and money laundering activities to fund them.

Friday's alert said that North Korean IT workers were impersonating nationals of other countries to obtain work and income on online platforms, and remit the money to government agencies.

"They also pose an insider threat to companies and are involved in data exfiltration, cryptocurrency theft, and theft of sensitive information," the alert said.

It warned that North Korean workers were using AI tools to further obscure their true identities.

The US, Japan, South Korea, the UK, Australia, and Canada have all issued earlier advisories against employing North Korean IT workers.

The alert listed typical methods used by such workers to hide their identities, including using proxies in third countries, falsifying documents and using cryptocurrency accounts for payment that are harder to track than standard bank accounts.

It said many of the workers were working from North Korea, China, Russia, and Southeast Asian countries, but would obscure their location using VPNs and remote desktop software.

Cover photo: IMAGO / Pond5 Images

More on North Korea: