- North Korean IT workers are reportedly funding the country’s nuclear programs, according to a warning from the U.S. and its allies.
- Canada and its allies have issued a joint advisory highlighting that North Korean IT workers pose an ‘insider threat’ by obtaining remote work to support the regime's nuclear ambitions.
- The advisory indicates that North Korean IT workers often falsify their nationality to secure employment and may use third-party proxies to create online accounts.
- North Korean IT workers are known to employ sophisticated methods, including AI, to conceal their identities and expand their global activities.
- These workers are involved in data exfiltration, cryptocurrency theft, and the theft of sensitive information, posing risks to companies worldwide.
- The advisory warns that contracting with North Korean IT workers may violate domestic laws in several countries, including the U.S. and Japan.
Canada and 10 allies have issued a stark warning regarding North Korean IT workers, labeling them as an 'insider threat' due to their ability to secure remote jobs abroad that fund the country's nuclear and ballistic missile programs.124
The advisory, released on Friday, emphasizes that these workers are increasingly sophisticated in their methods, often falsifying identities and utilizing third-party proxies to obtain employment. North Korean IT workers employ increasingly sophisticated methods, including the integration of AI, to obfuscate their identities and expand their activities globally.3
The advisory also notes that these workers often avoid direct deposit payments, opting instead for money transfers or cryptocurrency, which complicates tracking their financial activities. Once employed, the North Korean IT workers will often attempt to avoid being paid by direct deposit and instead request payment through either money transfer or cryptocurrency.

The report highlights that North Korean IT workers possess high-level skills and are involved in various sectors, including web development and blockchain services. The advisory notes the workers have high-level IT skills and are seeking work in wider areas, including web page and mobile app development, software and blockchain services.
Furthermore, the advisory warns that contracting with these workers may violate domestic laws in several countries, including Japan and the U.S., potentially leading to legal repercussions. Additionally, contracting with North Korean IT workers and paying them for services rendered may also violate the domestic laws of many countries, including Japan, the United States, and the Republic of Korea, and may result in legal consequences or financial penalties.6
“The joint advisory says workers use AI to conceal identities, sometimes run “laptop farms” and request payment via cryptocurrency or money transfer to avoid direct deposit. Hiring them may violate domestic laws in Japan, the U.S. and South Korea, and UN members must repatriate North Korean nationals earning income in their jurisdictions.”