North Korea using foreign talent to help infiltrate US companies: Report
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
North Korea is using remote IT workers from third countries like Iran and Lebanon to infiltrate US companies and fund its weapons programs, according to a report by NBC. These foreign workers assist by passing job interviews, after which North Korean operatives usually take over the positions. The US government and other agencies have alerted that North Korean IT workers engage in activities such as data theft, cryptocurrency theft, and leaking sensitive information.
Why it matters
The report highlights North Korea’s evolving tactics to bypass international sanctions and US countermeasures, posing risks to corporate security and the integrity of sensitive data. This development matters because it shows how North Korea leverages foreign talent for malicious purposes, which could increase cybercrime and threaten global cybersecurity.
Key context
In July, US and allied agencies issued warnings that North Korean IT workers seek contracts to funnel salaries to North Korean agencies and pose insider threats. North Korea’s cyber activities caused over $2 billion in crypto losses in 2025, a 51% rise from the previous year, according to cybersecurity firm CrowdStrike. Despite sanctions, North Korea’s GDP reportedly grew by 3.5% in 2025 per Bank of Korea estimates.
Key numbers and entities
The main entities are North Korea (DPRK), NBC, the US government, Iran, Lebanon, and cybersecurity company CrowdStrike. Verified figures include over $2 billion in crypto losses caused by North Korean hackers in 2025, marking a 51% year-on-year increase, and a 3.5% GDP growth in North Korea for 2025 estimated by the Bank of Korea. Foreign IT workers were reportedly offered about $500 monthly in cryptocurrency as part-time “interview associates.”
What remains unclear
The report does not specify how widespread these infiltration tactics are across US companies nor the full scale of third-country recruitment. Details on which specific US companies or sectors have been targeted remain unknown. It is also unclear how effective current countermeasures are in preventing these cyber intrusions.