U.S. and ROK Warn Against Hiring North Korean IT Workers

The U.S. and Republic of Korea have issued updated advisories regarding the risks associated with hiring information technology workers from North Korea (DPRK). These advisories highlight that DPRK IT workers may pose as non-DPRK nationals to gain employment, leading to potential theft of intellectual property, data, and funds. Companies are urged to recognize red flags and implement due diligence measures to avoid inadvertently hiring these workers. The advisories include new indicators of DPRK IT worker activity and emphasize the importance of reporting suspicious activities to authorities. The ongoing recruitment efforts by DPRK IT workers continue to threaten organizations globally, with significant implications for cybersecurity and compliance with international sanctions.

Key Points: • U.S. and ROK updated advisories on hiring North Korean IT workers. • DPRK IT workers may pose as non-DPRK nationals to secure jobs. • Hiring DPRK IT workers risks theft of data and potential legal consequences.