On Friday, the United States together with ten allied countries issued a joint warning that North Korea is operating IT personnel who hide behind false identities to obtain funds for the country’s prohibited nuclear and ballistic missile programs.
The countries named in the statement are the United States, the Republic of Korea (South Korea), the United Kingdom, Australia, Canada, France, Germany, Italy, the Netherlands and New Zealand. The advisory was published by the United States Department of State, which said North Korea has built an international network whose members, at home and abroad, conceal their identities to secure financial resources for the regime’s illicit weapons programs.
The statement describes the methods used: trained IT personnel contract through privately run online platforms to perform remote employment, procurement and service tasks, with the intent that earnings are remitted to their North Korean parent organization. They increasingly deploy sophisticated techniques — including artificial intelligence — to mask identities, and engage in data theft, cryptocurrency theft, and the exfiltration of other sensitive information.
The eleven countries warned that contracts with these disguised North Korean IT workers and payments for their services may violate domestic laws in a number of states, including Japan, the United States and the Republic of Korea, and could expose involved parties to legal and financial consequences and penalties.
Accordingly, the statement recommended that United Nations member states repatriate North Korean nationals who earn income under their jurisdiction where the individuals do not fall under the exceptions listed in the relevant United Nations Security Council resolution. The advisory also urged national authorities to undertake thorough investigations to understand and uncover the working methods of these North Korean IT operators and to design and implement necessary countermeasures, with particular focus on improving identity-verification practices.
Why this matters
Authorities stress that seemingly routine remote work contracts or online service agreements can provide direct revenue streams for a regime operating in violation of international law. The use of technological tools — including artificial intelligence — complicates detection and attribution, which is why the advisory emphasizes prevention and stronger identity verification.
The statement was issued on a Friday; signatory countries called on states to act in accordance with existing international obligations and relevant United Nations Security Council decisions.
Lead image: illustrative.
