Key facts
- 11 countries, including South Korea and the U.S., issued a joint alert on North Korean IT workers.
- These workers are accused of generating revenue to fund North Korea's nuclear weapons and ballistic missile programs.
South Korea, the U.S., Japan, and eight other countries issued a joint alert regarding North Korean IT workers accused of generating revenue for Pyongyang's weapons programs. The alert urges entities to understand and counter these schemes, which involve false identities and income remittance to North Korean agencies.

This joint alert underscores international efforts to disrupt North Korea's illicit financing channels for its weapons programs, highlighting the global nature of the threat posed by North Korean IT workers and the potential legal and financial risks for companies engaging with them.
South Korea, the United States, Japan, and eight other nations have issued a joint alert concerning North Korean information technology (IT) workers suspected of generating revenue to finance Pyongyang's weapons of mass destruction programs. The alert, released by the U.S. State Department, urges countries, companies, and entities to enhance their understanding of these schemes and implement stronger countermeasures, including improved identity verification.
According to the alert, North Korea utilizes a network of skilled IT workers, both domestically and abroad, who obtain false identities to earn income remotely. This income is allegedly used to fund the regime's unlawful nuclear weapons and ballistic missile development. These workers often impersonate nationals of other countries to secure employment and contracts through private online platforms, with the intention of remitting their earnings back to North Korean agencies.
The alert also highlights that these IT workers pose insider threats, engaging in activities such as data exfiltration, cryptocurrency theft, and the pilfering of sensitive information. Increasingly sophisticated methods, including the integration of artificial intelligence, are reportedly employed to obscure their identities and expand their global operations.
All U.N. member states were reminded of their obligation, under a U.N. Security Council resolution, to repatriate all North Korean nationals earning income within their jurisdictions, with limited exceptions. Furthermore, the alert stated that engaging with North Korean IT workers and paying them for services may contravene the domestic laws of many countries, including Japan, the United States, and South Korea, potentially leading to legal consequences or financial penalties.