North Korean IT Workers: The New “Remote” Threat to Your Company’s Data
The FBI warns of North Korean IT worker schemes using data theft to extort victims, raising funds for the DPRK. These workers, disguised as freelancers, exfiltrate sensitive data, holding it hostage for ransom. The FBI advises businesses to enhance hiring practices to counter these tactics.

Hot Take:
North Korean IT workers have taken the advice “fake it until you make it” to a whole new level, but instead of making it, they’re breaking into your data and breaking your heart! It’s time to add “check for DPRK spy” to the hiring checklist, right next to “must be proficient in Excel.”
Key Points:
- North Korean IT workers are stealing data from former employers and demanding ransom.
- Their tactics include copying company code repositories and harvesting sensitive credentials.
- These schemes have evolved significantly, leveraging the remote work trend to disguise identities.
- FBI advises businesses to strengthen hiring and monitoring practices to prevent such schemes.
- Five individuals involved in this scheme have been charged with generating revenue for North Korea.
Already a member? Log in here