logo

North Korea’s fake tech workers now targeting European employers

ID: cd9f16b4-1d0a-505f-87fe-240b20d310bc

STIX ID: report--cd9f16b4-1d0a-505f-87fe-240b20d310bc

Feed Name: The Register (Security)

Threat Score
78/100

Date Published: 2025-04-02

Date Updated: 2026-04-26

Author: Simon Sharwood

...
...

North Korean operators run an organized campaign placing fake remote IT workers into European and US companies to divert salaries to Pyongyang, deploy malware, exfiltrate proprietary data, and extort employers; they use deepfakes, AI-generated personas, false documentation, local facilitators, VPNs and alternative payment channels to evade detection and scale operations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.