How North Korea Is Outsourcing Espionage to American Companies
December 1, 2025
By: Pat Fallon
US companies must take more responsibility to work with the government and prevent cyberattacks from foreign threats.
This past June, the US Department of Justice (DOJ) stated that North Korean individuals successfully compromised the identities of 80 Americans while interviewing for remote employment opportunities at over 100 US companies, including Fortune 500 companies. The real breach is identity—assuming that identity is static—but digital identities can drift and decay, leading to an erosion of trust. The DPRK-led breach caused American companies to incur losses or damages of at least $3 million, and that figure is likely just the beginning.
Historically, the North Korean threat to the United States has revolved around their military arsenal—testing intercontinental ballistic missiles (ICBMs) that pale in comparison to our own arsenal but could still target the US Homeland. However, today’s challenge from beyond the 38th parallel amounts to something entirely different. North Korea’s cyber warfare capabilities are now an instrument of national power; they integrate espionage, financial crime, and sanctions during an enduring campaign, rather than episodic attacks.
Strategically insidious in how it exploits our self-deception about identity and access, cyber warfare continues to grow in its sophistication. The North Korean workers manipulated employers to believe they were within the United States, when in fact, many were based out of North Korea or China, and the revenue generated was transferred to North Korean-controlled accounts. Such accounts allow North Korea to skirt US sanctions and fund the regime’s weapons programs.
North Korea’s sophisticated intrusion into numerous American companies is symptomatic of broader vulnerabilities in digital authentication. These North Korean individuals were able to bypass any measures companies had in place to authenticate their identity. American companies must verify the identities of individuals they hire and ensure they are legally authorized to work in the United States.
https://nationalinterest.org/blog/korea-watch/how-north-korea-is-outsourcing-espionage-to-american-companies
