North Korea Recruits Foreign Talent for US Firm Infiltration
North Korea is increasingly relying on remote workers based in third countries to infiltrate US companies and route funds back to the country, according to a report published by NBC. The scheme involves recruiting foreign IT workers from countries such as Iran and Lebanon to help North Korean-linked actors gain access to internal systems.
The report notes that after contracts are obtained, North Korean operatives often take over the positions, posing an insider threat to companies. In some cases, candidates were offered cryptocurrency compensation for part-time work, with one example citing $500 monthly in exchange for interview associates' services.
The tactics extend to cryptocurrency theft, with some campaigns resulting in substantial losses. According to CrowdStrike, North Korean state-affiliated hackers were responsible for more than $2 billion in crypto losses in 2025, a 51% increase year-on-year.