FBI investigates North Korean IT worker at US federal agency

The FBI is investigating a North Korean remote IT worker who successfully gained employment with an unidentified US federal agency. Disclosed by Todd Hemmen, deputy assistant director of the FBI's Cyber Capabilities Branch, the case highlights the increasing sophistication of North Korean operatives using false identities to infiltrate US organizations.

These workers often use stolen identities, fraudulent documents, and virtual private networks to mask their true location. In some instances, US-based facilitators assist by receiving company hardware or creating the illusion that the worker is physically located within the United States. Beyond earning salaries for the regime, these operatives may use their access to steal proprietary information, credentials, and sensitive data, sometimes leading to extortion attempts.

Artificial intelligence is reportedly being utilized to enhance these schemes, including the creation of convincing CVs, identity documents, and even participating in video interviews to bypass traditional recruitment security measures.