lazarusholic

Everyday is lazarus.dayβ

How Are North Korean IT Workers Hacking the Global Remote Job Market

2025-07-01, SOCRadar
https://socradar.io/north-korean-it-workers-hack-global-remote-job-market/
#ITWorker #JasperSleet

Contents

How Are North Korean IT Workers Hacking the Global Remote Job Market?
North Korean threat actors are no longer just building malware or running phishing campaigns. They are quietly infiltrating companies by posing as remote IT workers. Once hired, they access internal systems, extract valuable data, and redirect profits to the regime. They now use AI tools to enhance documents, modify voices, and alter photos to pass identity checks.

Recent findings from U.S. law enforcement and Microsoft point to a coordinated global operation. One of the main clusters behind these activities is tracked as Jasper Sleet. These actors blend into freelance platforms and IT roles, creating serious risks for organizations that unknowingly give them access.

What Is North Korea’s Remote IT Worker Scheme?
North Korea operates a global network of covert IT professionals who pose as freelance or remote employees. These individuals do not just complete software tasks. Their real mission is to quietly …