FBI: Thousands of remote IT workers sent wages to North Korea to help fund weapons program

Oct 19, 2023, 6:44 AM | Updated: 12:56 pm

ST. LOUIS (AP) — Thousands of information technology workers contracting with U.S. companies have for years secretly sent millions of dollars of their wages to North Korea for use in its ballistic missile program, FBI and Department of Justice officials said.

The Justice Department said Wednesday that IT workers dispatched and contracted by North Korea to work remotely with companies in St. Louis and elsewhere in the U.S. have been using false identities to get the jobs. The money they earned was funneled to the North Korean weapons program, FBI leaders said at a news conference in St. Louis.

Federal authorities announced the seizure of $1.5 million and 17 domain names as part of the investigation, which is ongoing.

Jay Greenberg, special agent in charge of the St. Louis FBI office, said any company that hired freelance IT workers “more than likely” hired someone participating in the scheme. An FBI spokeswoman said Thursday that the North Koreans contracted with companies across the U.S. and in some other countries.

“We can tell you that there are thousands of North Korea IT workers that are part of this,” spokeswoman Rebecca Wu said.

FBI officials said the scheme is so prevalent that companies must be extra vigilant in verifying whom they are hiring, including requiring interviewees to at least be seen via video.

“At a minimum, the FBI recommends that employers take additional proactive steps with remote IT workers to make it harder for bad actors to hide their identities,” Greenberg said in a news release.

John Hultquist, the head of threat intelligence at the cybersecurity firm Mandiant, said North Korea’s use of IT freelancers to help fund the weapons program has been in play for more than a decade, but the effort got a boost from the COVID-19 pandemic.

“I think the post-COVID world has created a lot more opportunity for them because freelancing and remote hiring are a far more natural part of the business than they were in the past,” Hultquist said.

North Korea also uses workers in other fields to funnel money back for the weapons program, Hultquist said, but higher pay for tech workers provides a more lucrative resource.

Officials didn’t name the companies that unknowingly hired North Korean workers, say when the practice began, or elaborate on how investigators became aware of it. But federal authorities have been aware of the scheme for some time.

In May 2022, the State Department, Department of the Treasury, and the FBI issued an advisory warning of attempts by North Koreans “to obtain employment while posing as non-North Korean nationals.” The advisory noted that in recent years, the regime of Kim Jong Un “has placed increased focus on education and training” in IT-related subjects.

Court documents allege that the government of North Korea dispatched thousands of skilled IT workers to live primarily in China and Russia with the goal of deceiving businesses from the U.S. and elsewhere into hiring them as freelance remote employees.

The IT workers generated millions of dollars a year in their wages to benefit North Korea’s weapons programs. In some instances, the North Korean workers also infiltrated computer networks and stole information from the companies that hired them, the Justice Department said. They also maintained access for future hacking and extortion schemes, the agency said.

Greenberg said the workers used various techniques to make it look like they were working in the U.S., including paying Americans to use their home Wi-Fi connections.

Tensions on the Korean Peninsula are high as North Korea has test-fired more than 100 missiles since the start of 2022 and the U.S. has expanded its military exercises with its Asian allies, in tit-for-tat responses.

The Justice Department in recent years has sought to expose and disrupt a broad variety of criminal schemes aimed at bolstering the North Korean regime, including its nuclear weapons program.

In 2016, for instance, four Chinese nationals and a trading company were charged in the U.S. with using front companies to evade sanctions targeting North Korea’s nuclear weapons and ballistics initiatives.

Two years ago, the Justice Department charged three North Korean computer programmers and members of the government’s military intelligence agency in a broad range of global hacks that officials say were carried out at the behest of the regime. Law enforcement officials said at the time that the prosecution highlighted the profit-driven motive behind North Korea’s criminal hacking, a contrast from other adversarial nations like Russia, China and Iran that are generally more interested in espionage, intellectual property theft or even disrupting democracy.

In September, North Korean leader Kim Jong Un called for an exponential increase in production of nuclear weapons and for his country to play a larger role in a coalition of nations confronting the United States in a “new Cold War,” state media said.

In February, United Nations experts said that North Korean hackers working for the government stole record-breaking virtual assets last year estimated to be worth between $630 million and more than $1 billion. The panel of experts said in a report that the hackers used increasingly sophisticated techniques to gain access to digital networks involved in cyberfinance, and to steal information that could be useful in North Korea’s nuclear and ballistic missile programs from governments, individuals and companies.


Eric Tucker in Washington, D.C, contributed to this report.

United States News

FILE - Republican presidential candidate and former President Donald Trump speaks to Texas state tr...

Associated Press

Appeals court upholds gag order on Trump in Washington case but narrows restrictions on his speech

A federal appeals court in Washington on Friday largely upheld a gag order on former President Donald Trump in his 2020 election interference case but narrowed the restrictions on his speech.

45 minutes ago

FILE - Migrant families wade through shallow waters toward Roma, Texas, March 24, 2021. A federal j...

Associated Press

Federal judge prohibits separating migrant families at US border for 8 years

A federal judge on Friday prohibited the separation of families at the border for purposes of deterring immigration for eight years.

2 hours ago

Associated Press

Indiana secretary of state appeals ruling for US Senate candidate seeking GOP nod

INDIANAPOLIS (AP) — The Indiana secretary of state is appealing a ruling that a law stipulating voting requirements for a candidate’s party affiliation is unconstitutional in a decision that lifted the hopes of a U.S. Senate hopeful who wants to run as a Republican. The Indiana attorney general’s office filed the notice of appeal Friday […]

2 hours ago

Associated Press

Nashville Police investigation into leak of Covenant School shooter’s writings is inconclusive

NASHVILLE, Tenn. (AP) — Nashville Police have “exhausted all available investigative avenues” in the hunt for the person who leaked pages from a school shooter’s journals to a conservative commentator, the department announced in an email sent to media late on Friday. The writings are part of an ongoing legal battle over whether they should […]

2 hours ago

Associated Press

Arkansas man sentenced to 5 1/2 years for firebombing police cars during 2020 protests

LITTLE ROCK, Ark. (AP) — The ringleader of a group who admitted to firebombing several police cars in Arkansas during the 2020 protests over the killing of George Floyd has been sentenced to five and a half years in federal prison, while three of his co-defendants were sentenced to 18 months each. A federal judge […]

4 hours ago

Associated Press

Guest lineups for the Sunday news shows

WASHINGTON (AP) — ABC’s “This Week” — Secretary of State Antony Blinken; former Rep. Liz Cheney, R-Wyo. ___ NBC’s “Meet the Press” — Sens. Mitt Romney, R-Utah, and Chris Murphy, D-Conn. ___ CBS’ “Face the Nation” — Shalanda Young, director of the White House Office of Management and Budget; Sens. Bernie Sanders, I-Vt., and James […]

4 hours ago

Sponsored Articles

(KTAR News Graphic)...

KTAR launches online holiday auction benefitting Boys & Girls Clubs of the Valley

KTAR is teaming up with The Boys & Girls Clubs of the Valley for a holiday auction benefitting thousands of Valley kids.

Follow @KTAR923...

Valley residents should be mindful of plumbing ahead of holidays

With Halloween in the rear-view and more holidays coming up, Day & Night recommends that Valley residents prepare accordingly.



Key dates for Arizona sports fans to look forward to this fall

Fall brings new beginnings in different ways for Arizona’s professional sports teams like the Cardinals and Coyotes.

FBI: Thousands of remote IT workers sent wages to North Korea to help fund weapons program