Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers
2026-09-14 • Silentpush •
Silent Push uncovered a Discord advertisement recruiting foreign facilitators to impersonate remote job applicants for a suspected North Korean IT worker. The operator offered facilitators 35% of earnings to provide their identities, appear in interviews, receive employer payments, and enable remote completion of technical assessments. Silent Push assessed the operator as North Korean with high confidence based on financial, operational, and infrastructure evidence, while noting that behavioral observations alone were insufficient for attribution. The scheme creates sanctions, insider-threat, intellectual-property theft, and data-exfiltration risks for employers.