North Korean Operatives Are Getting Jobs at U.S. Companies: How Employers Can Protect Themselves

Security researchers at Nisos have uncovered a sophisticated operation where North Korean operatives are successfully applying for and securing jobs at U.S. companies on an industrial scale. These fake employees pose as legitimate remote workers during the hiring process. The investigation, featured on Nicole Perlroth's podcast "To Catch a Thief," goes inside the actual operations of these cells and shows how they work. This primarily affects employers and hiring managers at U.S. companies, especially those hiring remote workers. However, families should be aware if someone in their household is involved in hiring decisions at work. These operatives are sophisticated and can pass initial screening processes. Once hired, they gain access to company systems and sensitive information.

If you are involved in hiring at your workplace, take these steps immediately:

1. Verify candidate identities thoroughly during video interviews. Watch for inconsistencies between the person on camera and their application materials.
2. Be suspicious of candidates who are reluctant to turn on their camera or have technical issues that prevent face-to-face interaction.
3. Conduct thorough background checks that verify employment history and references directly.
4. Report suspicious job applications to your HR department and company security team. For long-term protection, companies need strong verification processes for all remote hires. Families should discuss workplace security with household members who have hiring responsibilities. Understanding these threats helps everyone recognize warning signs. If something feels off about a job candidate, trust your instincts and escalate concerns to the appropriate people at your organization.