The Wall Street Journal's investigation reveals North Korean workers infiltrating U.S. companies, utilizing AI and stolen identities in the process.
An investigative film by The Wall Street Journal, titled "Infiltrated: North Korea’s Secret U.S. Workforce," has revealed a clandestine network of North Korean workers embedded in American companies.
This investigation utilized leaked materials from a North Korean cell, including browser histories, emails, calendars, and screen recordings.
The FBI has reportedly identified thousands of these so-called "job seekers" throughout the U.S. The group monitored by the WSJ sent applications to over 1,000 companies in just three months, leveraging artificial intelligence for various stages of the hiring process, including crafting cover letters, resumes, and even preparing for interviews.
Key to this operation are American intermediaries, who maintain corporate laptops in the U.S. while North Korean workers access them remotely.
These intermediaries facilitate operations such as opening bank accounts, cashing checks, and even participating in interviews. One Ohio resident recounted attending work meetings while North Koreans executed the actual job responsibilities, splitting a salary of $75,000 per year.
In some cases, American identities are stolen for background checks during the hiring process. The WSJ reported that some workers manage multiple "foreign" profiles, applying for various positions under different names.
A Georgian individual shared that his identity was sold online, leading to job placements across the country, which has since hindered his ability to open a bank account or rent a home.
The investigation also unveiled that some salaries are directed to North Korean authorities. According to the U.S. Treasury Department, certain North Korean IT workers can earn as much as $300,000 annually, with approximately 90% of these earnings sent to the regime.
Estimates indicate that this entire operation could yield up to $800 million annually. The investigation traced financial flows from North Korean IT workers and cybercriminals to a company sanctioned by the U.S. in connection with Pyongyang's weapons program.
Furthermore, in August, cybersecurity experts from Genians discovered that North Korean hackers had begun incorporating local AI into attacks against cryptocurrency firms.
