TLDR
- North Korea is recruiting IT workers in countries like Nigeria, South Africa, Iran, and India to help place fake workers inside US companies
- Foreign “interview associates” are paid around $500 per month in some cases using cryptocurrency
- North Korean operatives take over jobs once contracts are secured, sending earnings back to Pyongyang
- The scheme is estimated to generate between $600 million and $800 million annually for North Korea
- North Korean cyber activity, including crypto theft, exceeded $2 billion in losses in 2025
North Korea has expanded a long-running scheme to place fake IT workers inside US and global tech companies. The operation now relies on recruits in third countries to help North Korean operatives pass job interviews and bypass identity checks.
JUST IN: North Korea is reportedly using foreign workers to help its operatives infiltrate U.S. companies through fake remote job applications. pic.twitter.com/m3D3TJQ43R
— EyeWhales (@EyeWhales) September 12, 2026
According to a September 11, 2026 NBC News report citing US officials and cybersecurity researchers, the scheme has grown to include facilitators in Nigeria, South Africa, Iran, India, and parts of Latin America.
The basic method is straightforward. North Korean IT workers apply for remote tech jobs at foreign companies. Once a contract is secured, a North Korean operative typically takes over the role. The salary is then sent back to Pyongyang.
The money is believed to fund sanctioned programs, including North Korea’s weapons development efforts.
How Facilitators Are Recruited
Cybersecurity firm Flare found that North Korean operators are scouting developers on platforms like LinkedIn. Some recruits are offered around $500 per month to act as “interview associates,” appearing on camera during job interviews while posing as the actual applicant.
In one message reviewed by researchers, a North Korean operator told a potential recruit: “You’re from a country that is under sanctions. If you’re still interested in the role, I need to confirm whether you’re comfortable working under someone else’s identity.”
Countries like Iran are being targeted partly because local developers face limited access to international work due to their own sanctions, making them more open to such arrangements.
Cybersecurity firms Kudelski Security and DTEX both confirmed that developers in South Africa, Syria, Iran, Nigeria, Pakistan, and parts of Latin America have been approached through this network.
Scale of the Operation
The United Nations estimates North Korea’s remote IT worker schemes bring in up to $600 million per year. A US-led sanctions monitoring assessment placed the figure as high as $800 million in 2024.
Broader US intelligence assessments put North Korea’s total annual earnings from cyber activities, including IT worker schemes and cryptocurrency theft, at at least $1 billion.
In May 2026, cybersecurity company CrowdStrike reported that North Korean state-affiliated hackers were responsible for more than $2 billion in crypto losses in 2025, a 51% year-on-year increase.
North Korea’s GDP grew an estimated 3.5% in 2025, according to the Bank of Korea, despite ongoing international sanctions.
In July 2026, the US State Department and Department of Justice issued a joint warning alongside foreign agencies, stating North Korea was using “increasingly sophisticated” tactics to recruit individuals outside its borders to help hide operatives’ identities.
Blockchain firm Consensys previously disclosed it had unknowingly outsourced developer work to a North Korean operative.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
