Bottom line: Germany, together with ten other states, is warning about North Korean IT workers who take on remote jobs under false identities to fund nuclear weapons and missile programs, while also stealing data and cryptocurrencies.
Germany, the US and nine other states have published a joint warning about North Korean IT workers who take on remote work under false identities, thereby funding North Korea’s nuclear weapons and missile programs.
The Foreign Office, together with the US, Japan, South Korea, Australia, France, Italy, Canada, New Zealand, the United Kingdom and the Netherlands, has published a notice warning of a network of skilled North Korean IT workers. These operate both inside and outside North Korea, obtain false identities and generate income through remote work that, according to the signatory states, flows into North Korea’s unlawful nuclear weapons and missile programs.
According to the authorities, the individuals involved pose as nationals of other countries and use online platforms for staffing, procurement and service brokering to gain access to contracts and income. Beyond this access, they are also said to threaten companies from within: the notice cites data exfiltration, theft of cryptocurrencies and theft of sensitive information as concrete threat scenarios. The methods used to disguise their true identities are said to be becoming increasingly sophisticated, partly through the use of artificial intelligence.
For CISOs, this translates into a concrete risk in the area of recruitment and remote work, particularly when hiring freelance IT staff via contract-award platforms. The signatory states are calling on companies that operate such platforms, as well as firms that employ remote personnel, to strengthen their countermeasures. Improving identity verification during the hiring process is explicitly named as a starting point.
For security officers, this means reviewing existing processes for verifying contractors and external IT staff, especially for remote roles with access to sensitive systems, cryptocurrency holdings or confidential data. The joint warning from eleven states underscores that this is a coordinated, state-backed effort rather than isolated cases.
Source: www.it-daily.net · Published August 3, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.