North Korean Fake Worker Scam Targets US Companies

• •North Korean operatives are infiltrating US companies using fake identities.
• •The scam has reportedly cost organizations hundreds of millions since 2017.
• •DPRK's cyber operations are linked to over $2 billion in cryptocurrency theft in 2025.

North Korean operatives are infiltrating US companies by posing as foreign IT specialists, exploiting trust and business processes to gain legitimate access. These fake workers often secure remote employment under false identities, with reports indicating that they have cost organizations hundreds of millions since 2017. The US government issued warnings about these tactics, highlighting that North Korean operatives are often recruited through third-party specialists. The DPRK's cyber operations are linked to significant financial crimes, including over $2 billion in cryptocurrency theft in 2025 alone. As sanctions limit North Korea's access to resources, the regime increasingly relies on sophisticated cyber tactics to generate revenue and conduct espionage. Security teams must collaborate with HR and legal departments to mitigate these insider threats.