North Korea Infiltrates US Firms Through Foreign Remote Workers

North Korea's latest tactic to infiltrate US companies involves hiring foreign IT workers in third countries, who are then replaced by North Korean operatives once they have access to sensitive information. This strategy was highlighted in a recent report by NBC News, which warned that North Korean efforts increasingly rely on remote workers outside the country to gain entry into companies.

The report detailed how North Korea's approach has shifted towards leveraging remote workers to obtain legitimate work contracts after navigating hiring processes. Once these third-country IT workers secure roles, they are 'usually' replaced by North Korean operatives who have access to systems, credentials, or internal knowledge.

NBC also reported that some foreign workers were recruited on LinkedIn, while others were offered cryptocurrency payments for part-time 'interview associate' tasks. This tactic allows them to appear credible in recruitment pipelines and potentially align with a longer-term operational goal.