North Korea's Latest 'IT Worker' Scheme Seeks Nuclear Funds
ID: 7b29d0e9-a743-5700-8398-f9691a01fd55
STIX ID: report--7b29d0e9-a743-5700-8398-f9691a01fd55
Feed Name: Dark Reading
Date Published: 2025-03-04
Date Updated: 2026-04-21
Author: Kristina Beek, Associate Editor, Dark Reading
North Korean-linked actors are conducting an employment-fraud campaign by impersonating Vietnamese, Japanese, and Singaporean IT workers on GitHub to secure remote developer positions and raise funds for Pyongyang’s weapons programs; researchers identified six personas (two that obtained jobs), common email/name patterns, digitally altered profile photos, and recommend in-person ID verification and detailed online vetting during hiring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
