New Zealand NCSC Cyber Threat Report 2026 (2025/26), Judgement 2, Case Study 1: North Korean IT workers in New Zealand
North Korean IT worker employed remotely by a large New Zealand business using false persona and NZ citizen laptop operator · During the year (2025/26)
During the year a large New Zealand business became suspicious of the identity details of an IT contractor working remotely. The business contacted the NCSC and New Zealand Police, and investigation identified the worker as being from North Korea (Democratic People's Republic of Korea or DPRK). To gain employment the North Korean worker used a false persona including fake identity documents, a New Zealand address as a contact point and recruited a New Zealand citizen to receive and operate the company's laptop.