North Korean IT workers are systematically infiltrating hundreds of global corporations, including multiple Fortune 500 companies and a U.S. government agency, by posing as remote tech freelancers.
Fox News reports that federal law enforcement is warning that North Korean operatives posing as IT workers are applying for remote jobs at U.S. companies, and many are getting hired.
REMOTE WORK INFILTRATION: North Korean operatives are using stolen identities, fake profiles, and American proxies to land remote IT jobs at major U.S. companies, funneling over $800 million directly into Pyongyang’s weapons programs.
According to federal law enforcement and… pic.twitter.com/zfJpslPN5O
— Special Report (@SpecialReport) August 19, 2026
The scheme relies on advanced technical deception and physical coordination to maintain the illusion of being domestic remote workers, according to Skadden.
The Federal News Network reports operatives are purchasing stolen American identities from the dark web and using artificial intelligence to generate resumes, creating fake developer profiles on GitHub or LinkedIn, and applying live face-swapping or deepfake video masks during virtual interviews.
According to the Treasury Department, in 2024, the sprawling, state-directed workforce generated nearly $800 million for North Korea, helping the heavily sanctioned regime fund its weapons programs.
Read more Trump Administration Moves to Bar Illegal Immigrants From Refundable Tax Credits
Treasury Secretary Scott Bessent said in a statement:
The North Korean regime targets American companies through deceptive schemes carried out by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments.
The danger goes well beyond generating funding for North Korea’s weapons programs as the workers gain legitimate credentials and trusted access to corporate networks, potentially opening the door to theft, espionage, extortion and more sophisticated North Korean cyber operations.
The FBI is warning that these workers leverage their internal corporate access to plant malware, exfiltrate sensitive trade secrets, steal proprietary source code, and actively extort their employers.
Federal law enforcement, in cooperation with international allied governments, has escalated its crackdown by raiding domestic laptop farms, freezing fraudulent bank accounts, and issuing multi-nation security warnings to help organizations detect these AI-driven hiring frauds, according to a U.S. State Department press release.
U.S. Attorney Jeanine Ferris Pirro said in a statement:
North Korea is not just a threat to the homeland from afar. It is an enemy within. It is perpetrating fraud on American citizens, American companies and American banks. It is a threat to Main Street in every sense of the word.
Read more Trump Says He Expects to Meet With North Korea’s Kim Jong Un This Year
