Code Names, Fake Personas, and Iranian Recruits: New Details from Inside the NKITW Operation
Contents
By Flare Research
“You’re from a country that is under sanctions. If you’re still interested in the role, I need to confirm whether you’re comfortable working under someone else’s identity.”
– North Korean IT worker recruiting from other countries for their employment fraud strategy
Recent research into the NKITW operation uncovered evidence that the North Korean regime is likely hiring, with intention, individuals from Syria, Saudi Arabia, and Iran as part of its IT worker infiltration program, creating new urgency to improve employment verification.
With high confidence, Flare Research finds that North Koreans are deliberately targeting US defense contractors, cryptocurrency exchanges, and financial institutions. While the primary motivations appear to be financial, the deliberate targeting evidenced from their documents indicates that there may be other objectives at play as well.
The world wouldn’t be interesting without a little bit of irony. And there’s something genuinely poetic about discovering that North Korea, a country literally dubbed …
“You’re from a country that is under sanctions. If you’re still interested in the role, I need to confirm whether you’re comfortable working under someone else’s identity.”
– North Korean IT worker recruiting from other countries for their employment fraud strategy
Recent research into the NKITW operation uncovered evidence that the North Korean regime is likely hiring, with intention, individuals from Syria, Saudi Arabia, and Iran as part of its IT worker infiltration program, creating new urgency to improve employment verification.
With high confidence, Flare Research finds that North Koreans are deliberately targeting US defense contractors, cryptocurrency exchanges, and financial institutions. While the primary motivations appear to be financial, the deliberate targeting evidenced from their documents indicates that there may be other objectives at play as well.
The world wouldn’t be interesting without a little bit of irony. And there’s something genuinely poetic about discovering that North Korea, a country literally dubbed …
IoC
192.168.109.2
[email protected]
[email protected]