North Korea's 100,000-strong fake IT worker army rake in $500M a year for Kim Jong Un
Researchers map full org chart of the scam from dodgy recruiters to helpful Western collaborators Researchers at IBM X‑Force and Flare Research have uncovered data that sheds light on how North Korea's fake IT worker schemes operate and infiltrate companies in order to funnel money back to the regime and steal sensitive information.…

North Korea's 100,000-strong fake IT worker army rake in $500M a year for Kim Jong Un
In a shocking revelation, researchers from IBM X-Force and Flare Research have uncovered the intricate structure of North Korea's elaborate scheme to infiltrate global companies with a 100,000-strong army of fake IT workers. This operation, which is estimated to generate over $500 million annually for Kim Jong Un's regime, not only funnels money back to the isolated nation but also enables the theft of sensitive information.
The scam, which has been operating for years, involves a complex network of recruiters, intermediaries, and even some unsuspecting Western collaborators. Researchers have meticulously mapped out the entire operation, revealing how it operates and how it infiltrates companies to achieve its goals.
The scheme begins with North Korean recruiters targeting individuals in neighboring countries such as China and Vietnam. These recruiters often pose as legitimate employers, offering attractive job opportunities in the IT sector. They typically target individuals who are in dire need of work or those who are unaware of the true nature of the job offers. Once recruited, these workers are often subjected to harsh training and indoctrination, with the ultimate goal of infiltrating foreign companies.
After undergoing training, the fake IT workers are dispatched to various countries, including Europe and Asia. They are tasked with finding employment in companies that have access to sensitive information or financial resources. Once employed, these workers are instructed to leak information, steal proprietary data, or even engage in cyber espionage. In some cases, they are also tasked with funneling funds back to North Korea through complex financial networks.
The operation's success is partly due to its ability to exploit gaps in international security and employment practices. Many companies, in their quest for skilled workers, overlook the due diligence process, making it easier for North Korean operatives to infiltrate their ranks. Additionally, the fake workers often blend in seamlessly, as they are well-trained in their roles and can speak multiple languages.
Western collaborators play a crucial role in this scheme. Some individuals and companies, often unknowingly, assist in the recruitment or placement of these fake workers. This could involve providing false job references, facilitating visas, or even offering training programs. While not all collaborators are aware of the true purpose of their involvement, their actions inadvertently support the regime's illicit activities.
The scale of this operation is staggering. With an army of 100,000 fake IT workers, North Korea is able to generate significant revenue for its regime. This money is used to fund various programs, including nuclear weapons development and the regime's overall infrastructure. Moreover, the stolen information provides North Korea with valuable insights into global technological advancements and political strategies.
The revelation of this operation has raised concerns about the vulnerabilities in global supply chains and the need for enhanced security measures. Governments and companies around the world must be vigilant and implement robust due diligence processes to prevent such infiltration. Additionally, international cooperation is essential to dismantle these complex networks and hold those responsible accountable.
In conclusion, North Korea's fake IT worker army is a sophisticated and profitable operation that has been successfully infiltrating global companies for years. The revelation of its structure and extent highlights the need for increased vigilance and collaboration to combat such threats. As the world becomes more interconnected, the potential for such schemes to evolve and adapt grows, posing a significant challenge to global security.









