North Korea is Funding their Weapons Program by Posing as Remote IT Freelancers
- Greg Meyers
- May 12
- 2 min read

This is a real and growing concern that has been reported by both U.S. intelligence agencies and cybersecurity firms. North Korean operatives have been posing as remote IT freelancers and infiltrating companies - especially in the tech sector - in an effort to earn foreign currency and potentially conduct espionage or cyberattacks. Their end GOAL? Using their salaries to funnel millions $$ back to Pyongyang for its weapons program.
Key Details on how they are doing it?
What is their "Modus Operandi? These operatives often use fake identities or stolen credentials to apply for remote jobs, mostly in IT, software development, or tech support.
Which Platforms are being Targeted? They are using Freelance platforms like Upwork, Freelancer, and others have been used as entry points.
What is their End Goal(s)?
Financial Gain: Earnings are funneled back to the North Korean regime, helping it bypass international sanctions.
Espionage: Gaining access to sensitive data or systems.
Cyber Operations: Laying the groundwork for future cyberattacks.
How is the U.S. Government Dealing with this?
The FBI, DOJ, and Treasury Department have issued warnings and guidance to companies about these threats. Employers are encouraged to do thorough background checks and watch for red flags such as
Use of VPNs masking location.
Multiple accounts or freelancers sharing the same IP addresses or devices.
Inconsistent personal information or identity documents.
History of North Korean Cybercrime and Cryptocurrency Theft
Estimated Billions Stolen: Groups like Lazarus have stolen billions in cryptocurrency from exchanges and DeFi platforms. In 2022 alone, over $1.7 billion in crypto theft was attributed to North Korean hackers.
Money Laundering: They use mixers, shell companies, and foreign facilitators to launder crypto into usable funds.
Purpose: Much of this stolen money is funneled into missile and nuclear weapons development, according to the UN and intelligence agencies.
Comments