Eleven Countries Issue Joint Alert Over North Korean IT Workers

The United States, South Korea, Japan, and eight other countries issued a joint alert on July 31 warning companies against hiring North Korean IT workers. The 11 participating nations include Britain, Australia, Canada, France, Germany, Italy, the Netherlands, and New Zealand. According to the alert released by the U.S. State Department, North Korea utilizes a network of skilled IT workers who use false identities to remotely earn income that funds the regime's unlawful nuclear weapons and ballistic missile programs.

The joint document states that these workers impersonate nationals of other countries to secure contracts through online employment and procurement platforms. Once employed, they remit their salaries to North Korean government agencies. The alert warns that these individuals pose an insider threat to companies and are involved in cryptocurrency theft, data exfiltration, and the theft of sensitive information. To obfuscate their identities and expand their global reach, these workers are increasingly integrating AI tools, using VPNs, and employing proxies in third countries.

The issuing countries emphasized that U.N. member states must repatriate North Korean nationals earning income within their jurisdictions, citing U.N. Security Council resolutions. They further noted that contracting with these workers may violate domestic laws in countries such as the United States, Japan, and South Korea, potentially leading to financial penalties or legal consequences. Some reports noted that these workers often operate from North Korea, China, Russia, and Southeast Asian countries.