North Korean IT Worker Fraud Spreads Across Borders
-

The sanctioned networks operate across North Korea, Vietnam, Laos, and Spain, generating revenue to fund Pyongyang’s weapons program. Fraudulent tech workers often target a variety of industries, including blockchain companies, using stolen identities and fabricated personas to secure employment globally.
Reports show these schemes are sophisticated and growing. Some IT workers have been known to introduce malware into company networks to extract sensitive information. Companies are advised to carefully screen employees and business partners against OFAC sanctions and monitor for unusual payment activity to mitigate risks.