The U.S. Department of State and Federal Bureau of Investigation jointly issued an alert about North Korean IT workers. It urges countries, companies, and other entities to deepen their understanding of these schemes and implement measures against the tactics described in the alert. [1]
The alert
The alert says North Korea uses skilled IT workers inside and outside the country to obtain false identities and earn income for unlawful nuclear weapons and ballistic missile programs. It says workers impersonate nationals of other countries to obtain work and income through online platforms. [1]
The alert says these workers may pose an insider threat to companies and may be involved in data exfiltration, cryptocurrency theft, and theft of sensitive information. It also says they use increasingly sophisticated methods, including artificial intelligence, to obscure their identities and expand their activities globally. [1]