The Ultimate Insider Threat: How North Korean IT Workers Infiltrated the Global Remote Economy

DomainTools describes a DPRK Reconnaissance General Bureau operation that places disguised IT workers into remote roles at global tech firms to steal identities, obtain trusted access to code repositories and CI/CD pipelines, plant sleeper backdoors or exfiltration scripts, and launder substantial cryptocurrency through shell companies; the report calls for zero-trust hiring, continuous behavioral monitoring, and stronger identity verification.