logo

North Korea's Latest 'IT Worker' Scheme Seeks Nuclear Funds

ID: 7b29d0e9-a743-5700-8398-f9691a01fd55

STIX ID: report--7b29d0e9-a743-5700-8398-f9691a01fd55

Feed Name: Dark Reading

Threat Score
50/100

Date Published: 2025-03-04

Date Updated: 2026-04-21

Author: Kristina Beek, Associate Editor, Dark Reading

...
...

North Korean-linked actors are conducting an employment-fraud campaign by impersonating Vietnamese, Japanese, and Singaporean IT workers on GitHub to secure remote developer positions and raise funds for Pyongyang’s weapons programs; researchers identified six personas (two that obtained jobs), common email/name patterns, digitally altered profile photos, and recommend in-person ID verification and detailed online vetting during hiring.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.