10/15/2026
Thousands of North Korean IT workers are infiltrating companies across the world, generating millions of dollars for the North Korean regime and gaining access to sensitive corporate networks.
Posing as legitimate remote employees, they use stolen identities, earn salaries from unwitting companies, exploit their access to steal data, and funnel their earnings back to North Korea.
The scheme relies on a network of facilitators - including Americans - who are paid to appear on camera, participate in job interviews, verify fraudulent identities, and keep employment-related devices connected to the internet at personal residences.
U.S. companies should recognize the scale and persistence of the threat and review our updated PSA for mitigation guidance: www.ic3.gov/PSA/2026/PSA261013
