North Korean IT Workers Infiltrate Fortune 500 Companies via Remote Positions

Thursday, March 5, 2026 at 02:00 PM UTC·Source: DOJ / FBI

Updated: Friday, March 6, 2026 at 10:00 AM UTC

Executive Summary

DOJ charges 14 North Korean nationals operating as remote IT workers at Fortune 500 companies. $88M in wages funneled to DPRK regime.

Analysis

The Department of Justice has charged 14 North Korean nationals who obtained remote IT positions at Fortune 500 companies using stolen American identities. The workers used AI-generated profile photos and laptop farms in the US operated by facilitators. Over $88 million in wages were funneled to North Korea weapons programs. Companies in technology, finance, and healthcare were affected. The DOJ recommends enhanced identity verification for remote hiring.

Source Attribution

Originally published by DOJ / FBI on Mar 5, 2026. Verified by: DOJ, FBI.

Related Threats

HIGHData BreachExploited

Lazarus Group Targets DeFi Protocols with New Smart Contract Exploit Kit

Lazarus Group deploys modular smart contract exploit toolkit targeting DeFi protocols. $200M stolen across four platforms in March.

DeFi Protocols

6d agoChainalysis / SlowMist

CRITICALData BreachExploited

Lazarus Group Linked to $1.5B Bybit Cryptocurrency Heist

FBI attributes the $1.5 billion Bybit cryptocurrency exchange hack to North Korea Lazarus Group. Largest crypto theft in history.

Bybit Exchange

Mar 19, 2026FBI / Chainalysis

MEDIUMApt

OpenAI Discloses State-Sponsored Misuse of ChatGPT for Cyber Operations

OpenAI reports disrupting five state-sponsored groups using ChatGPT for reconnaissance, phishing content generation, and malware debugging.

ChatGPT

Mar 14, 2026OpenAI Threat Intelligence