logo

Amazon Fends Off 1,800 Suspected DPRK IT Job Scammers

ID: bde5a7d6-a6fe-507c-b8e3-8b5dc9b70fb9

STIX ID: report--bde5a7d6-a6fe-507c-b8e3-8b5dc9b70fb9

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-12-23

Date Updated: 2026-04-21

Author: Alexander Culafi

...
...

Amazon reports blocking more than 1,800 suspected DPRK-affiliated job applicants since April 2024 and a quarter-over-quarter increase in such applications; the article highlights a growing, sophisticated scheme where operatives use stolen identities and proxy infrastructure (including "laptop farms") to secure remote IT roles—often targeting AI/ML positions—to either gain network footholds for espionage or funnel wages to the DPRK. The piece reviews industry and DOJ responses, detection trends, and recommends multi-stage identity verification and reporting suspected cases to law enforcement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.