Team Cymru blog
Uncovering DPRK Remote Workers: Detecting Hidden Threats Through Internet Telemetry · 2025-06-30
Since at least 2018, North Korean operatives have posed as IT contractors to gain access to corporate environments across the globe. According to the FBI, two DPRK nationals operated under false identities at 64 companies and generated up to $866,000 USD in illicit earnings. ... A broader network of IT workers has been linked to over $6.8 million USD in revenue for North Korea between 2020 and 2023, much of which was laundered through cryptocurrency wallets and front companies source: U.S. DOJ .