11 countries issue joint alert on North Korean IT workers funding weapons programs

Workers use AI to obfuscate identities, steal data, and fund weapons, alert says

The United States, South Korea, Japan and eight other countries on Friday issued a joint alert warning that North Korean IT workers are using false identities to obtain remote work and funneling their salaries to fund Pyongyang’s nuclear weapons and ballistic missile programs. The alert, released by the U.S. State Department, urged companies and governments worldwide to strengthen identity verification and tighten countermeasures against the North Korean worker schemes.

“North Korea relies upon a network of skilled Information Technology workers, deployed within and outside of North Korea, to obtain false identities and remotely earn income to fund North Korea’s unlawful nuclear weapons and ballistic missile programs,” the alert read.

The alert said the workers impersonate nationals of other countries to obtain work and income through online platforms for employment, procurement, and contracting of services.

“These workers seek out contracts with the intent of remitting their salaries to their parent North Korean agencies. They also pose an insider threat to companies and are involved in data exfiltration, cryptocurrency theft, and theft of sensitive information,” the alert stated.

The alert noted that North Korean IT workers are using increasingly sophisticated methods, including the integration of artificial intelligence, to obfuscate their identities and expand their activities globally.

Citing a U.N. Security Council resolution, the alert stressed that all U.N. member states must repatriate North Korean nationals earning income in their jurisdictions, subject to limited exceptions.

“Additionally, contracting with North Korean IT workers and paying them for services rendered may also violate the domestic laws of many countries, including Japan, the United States, and the Republic of Korea, and may result in legal consequences or financial penalties,” the alert said.

The joint alert was issued by South Korea, the United States, Japan, Britain, Australia, Canada, France, Germany, Italy, the Netherlands, and New Zealand.