NBC reported that North Korea is using remote IT workers from third countries including Iran and Lebanon to help infiltrate U.S. companies and raise funds for its weapons program. A July alert issued by the United States and multiple foreign agencies said North Korean IT workers seek contract jobs with the goal of sending wages back to North Korean-linked entities. The warning also said they pose insider risks to companies, including data leaks, cryptocurrency theft, and the theft of sensitive information.
The report said that as governments including the U.S. step up countermeasures, North Korea has increasingly relied on third-country IT workers to go through job interviews. After a contract is secured, the position is often taken over by North Korean operatives. NBC also said some of these foreign IT workers are recruited on LinkedIn and that some receive about $500 a month in cryptocurrency to work part-time as interview assistants.
Separately, Cointelegraph reported in May, citing cybersecurity firm CrowdStrike, that North Korean state-linked hackers and threat actors were responsible for more than $2 billion in crypto losses in 2025, up 51% year over year. The Bank of Korea estimated that North Korea’s GDP grew 3.5% in 2025 despite global sanctions.
NBC reported that North Korea is using remote IT workers from third countries, including Iran and Lebanon, to help infiltrate U.S. companies and obtain funds for its weapons program.
A July alert issued by the United States and multiple foreign agencies said North Korean IT workers 「seek contracts with the intention of remitting wages back to North Korean-linked entities」. The alert also warned that they pose insider threats to companies, including data leaks, cryptocurrency theft, and the theft of sensitive information.
Third-country workers used in hiring and interviews
According to the report, as the U.S. and other governments increase countermeasures, North Korea has been relying more heavily on IT workers from third countries to go through job interviews. Once a work contract is obtained, the role is often taken over by North Korean operatives.
These foreign IT workers are recruited on LinkedIn, and some receive about $500 a month in cryptocurrency to serve part-time as interview assistants.
Crypto losses and broader figures
In May, Cointelegraph cited data from cybersecurity firm CrowdStrike saying that North Korean state-linked hackers and threat actors caused more than $2 billion in cryptocurrency losses in 2025, a 51% increase from a year earlier.
The Bank of Korea estimated that North Korea's GDP still grew 3.5% in 2025 despite global sanctions.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
