TREE NEWS reports: North Korean hackers have upgraded their infiltration playbook by recruiting third-country IT workers — including from Iran and Lebanon — via LinkedIn and paying them about $500 a month in cryptocurrency to sit interviews on their behalf, then taking over the hired remote roles themselves. The tactic, detailed in a July 31 joint advisory by the US State Department and FBI with 11 allied nations, lets them steal crypto assets, code and sensitive data while routing salaries back to Pyongyang.
North Korea Hackers Pay $500 in Crypto to Hired Stand-Ins for Job Interviews
The notable shift here is operational, not technical: the DPRK is outsourcing the one step that reliably exposes these schemes — the human interview — and paying for it in crypto, which keeps the arrangement deniable and cross-border. The advisory's multinational framing signals that allied governments now treat remote-hiring fraud as an intelligence-collection problem, not just a crypto-crime one. For crypto and RWA employers, the practical exposure sits in hiring pipelines and codebase access rather than wallets. Whether firms tighten identity checks on remote technical hires is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.