North Korea is expanding a long-running effort to infiltrate U.S. companies by recruiting personnel through third countries, including remote workers, according to U.S. government reporting, foreign agencies, and multiple cybersecurity researchers. The approach centers on placing people into jobs or screening pathways that can later be taken over by North Korean operatives.
NBC News reports that the scheme has broadened beyond recruiting in the United States to involve remote workers from other countries, citing examples that include Iran and Lebanon. Cointelegraph similarly describes North Korea using foreign IT workers as an entry point: individuals seek and pass job interviews, and their roles are “usually” taken over by North Korean operatives after they are hired.
While the outlets differ in emphasis—NBC News focuses on the remote, third-country component and the types of sources making the claims, and Cointelegraph highlights the job-interview pathway—their accounts align on the overall mechanism: third-country recruits are used to gain access to U.S.-based employers, enabling North Korean infiltration efforts.
