North Korean IT Workers Infiltrate US Companies Using Fraudulent Identities

• •North Korean operatives use fake identities to infiltrate U.S. companies.
• •The scheme generates an estimated $800 million annually for the DPRK regime.
• •A 220% increase in infiltrations was reported over the past year.

Foreign operatives, particularly from North Korea, are infiltrating U.S. companies by using fake or stolen identities to gain remote employment. This scheme allows them to access sensitive systems and data while collecting paychecks that are funneled to the North Korean regime, estimated to generate $800 million annually. The U.S. DOJ, OFAC, and FBI have prioritized countering this threat, which has seen a 220% increase in reported infiltrations over the past year. A joint advisory issued in July 2026 by the U.S. Department of State and FBI, along with ten allied nations, warns organizations about the growing risk posed by these fraudulent IT workers. The operatives often utilize AI and deepfake technology to enhance their applications and maintain multiple full-time positions simultaneously. The implications for affected companies extend beyond cybersecurity, impacting HR, immigration compliance, and contractor oversight.