27th January – Threat Intelligence Report · 2025-01-27
FBI has issued a warning about North Korean IT workers exploiting remote work opportunities to steal source code and extort employers. These state-sponsored individuals deceive companies by posing as independent contractors and using their access to extract information. The FBI identifies these actions as part of a larger effort to generate revenue for the North Korean government.
IT workers extorting employers with stolen data and code · In recent months (as of 2025-01-23)
After being discovered on company networks, North Korean IT workers have extorted victims by holding stolen proprietary data and code hostage until the companies meet ransom demands. In some instances, North Korean IT workers have publicly released victim companies' proprietary code.
Multiple Organizations in the U.S. · 23/01/2025
The FBI warns that North Korean IT worker schemes are stealing data to extort their victims as part of efforts to generate revenue for the Democratic People's Republic of Korea (DPRK). [Date Occurred: 'Over recent months'; Date Discovered: 'Over recent months']