US, Japan, South Korea and Allies Issue Alert on North Korean IT Workers
A coalition of eleven countries – the United States, Japan, South Korea, the United Kingdom, Australia, Canada, France, Germany, Italy, the Netherlands and New Zealand – issued a joint advisory warning companies against hiring information‑technology workers from North Korea. The statement says the workers use false identities, AI tools, VPNs and proxy servers to obtain remote freelance contracts and remit their earnings to North Korean state agencies, generating hard‑currency that funds Pyongyang’s nuclear weapons and ballistic‑missile programmes.
The advisory describes the workers as an “insider threat,” capable of data exfiltration, cryptocurrency theft and theft of sensitive information. It notes that many operate from North Korea, China, Russia and Southeast Asian countries, often via “laptop farms” set up by overseas facilitators. Companies are urged to strengthen identity‑verification procedures, consider repatriating such workers, and be aware that hiring them may violate domestic laws and attract legal penalties.
Entities: Five Eyes alliance · Global Affairs Canada · Japan · North Korea · North Korean IT workers · South Korea · U.S. Department of State · United Kingdom · United Nations Security Council · United States · United States
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 5 SOURCES] The coalition issuing the alert includes the United States, South Korea, Japan, United Kingdom, Australia, Canada, France, Germany, Italy, the Netherlands and New Zealand. (joint alert)
- [● 5 SOURCES] The United States and ten allied countries issued a joint warning against hiring North Korean IT workers. (joint warning)
- [● 3 SOURCES] The earnings of these workers fund North Korea's nuclear weapons and ballistic missile programmes. (funding claim)
- [● 3 SOURCES] North Korean IT workers impersonate foreign nationals to obtain remote work and remit earnings to North Korean agencies. (impersonation)
- [● 3 SOURCES] The workers use AI, VPNs and other methods to hide identities and operate from North Korea, China, Russia and Southeast Asia. (technical methods)
- [● 3 SOURCES] Contracting with North Korean IT workers may violate domestic laws of the United States, Japan, South Korea and other participating countries and could lead to legal penalties. (legal risk)
- [● 3 SOURCES] The workers pose insider threats, including data exfiltration, cryptocurrency theft and theft of sensitive information. (insider threat)
- [● 3 SOURCES] The advisory urges companies to strengthen identity‑verification procedures and consider repatriating North Korean workers. (advisory recommendation)