US alarmed as North Korea pays recruits $500 a month in Nigeria, South Africa, India and Iran to help fake workers get into American companies
United States authorities face growing alarm over North Korean operations that place fake remote workers inside American companies to generate illicit revenue. The Federal Bureau of Investigation previously dismantled more than 40 laptop farms across the country with assistance from CrowdStrike, seizing more than 200 devices in Texas without making arrests. These domestic hubs form part of a broader scheme managed from abroad, where recruits are paid $500 a month in countries including Nigeria, South Africa, India, and Iran to facilitate fraudulent hiring and bypass security controls.
Listen to Live Briefing
Real-time synthesized voice briefing Β· Live Feeds Desk
- β The FBI shut down more than 40 North Korean laptop farms in the U.S. with assistance from CrowdStrike.
- β Authorities seized over 200 devices in Texas as part of the operation.
- β No arrests have been made in connection with the seized devices in Texas.
- β North Korea aims to earn up to $500 million annually to fund its nuclear and weapons programs through these operations.
What changed
Global recruitment nodes spanning Nigeria, South Africa, India, and Iran offering $500 monthly payments to support the laptop farms have been identified.
Live updates
-
US Alarmed by North Korean Laptop Farms and Overseas Recruiters
United States authorities face growing alarm over North Korean operations that place fake remote workers inside American companies to generate illicit revenue. The Federal Bureau of Investigation previously dismantled more than 40 laptop farms across the country with assistance from CrowdStrike, seizing more than 200 devices in Texas without making arrests. These domestic hubs form part of a broader scheme managed from abroad, where recruits are paid $500 a month in countries including Nigeria, South Africa, India, and Iran to facilitate fraudulent hiring and bypass security controls.
Why it matters
Pyongyang uses these remote employment schemes to target Western firms and generate up to $500 million annually. This revenue directly finances North Korean nuclear and weapons programs, posing a severe national security threat to the United States. Federal investigators continue to track how overseas operatives coordinate with domestic infrastructure to maintain illicit access to corporate networks.
What is confirmed
- The FBI shut down more than 40 North Korean laptop farms in the U.S. with assistance from CrowdStrike.
- Authorities seized over 200 devices in Texas as part of the operation.
- No arrests have been made in connection with the seized devices in Texas.
- North Korea aims to earn up to $500 million annually to fund its nuclear and weapons programs through these operations.
Still unconfirmed
- North Korea pays recruits $500 a month in Nigeria, South Africa, India, and Iran to help fake workers get into American companies.
What to watch next
- Whether the Department of Justice issues arrest warrants for individuals linked to the Texas devices
- Additional international law enforcement actions against the overseas recruitment hubs in Nigeria, South Africa, India, and Iran
confidence 80%Sources used for this update (3)
- www.cnbcafrica.com β Oil falls after Trump declares βenergy ceasefireβ between Russia and Ukraine | CNBC Africa
- www.whitehouse.gov β Investments β The White House
- govtschemes.org β Trump $5000 Dividend: Is It a Bribe If You Never Get Paid?
-
FBI dismantles 40 North Korean laptop farms used by fake workers
The FBI shut down more than 40 North Korean laptop farms in the U.S. with assistance from CrowdStrike. These sites facilitate the placement of fake remote workers in American companies to generate revenue for Pyongyang. The operation resulted in the seizure of over 200 devices in Texas, though authorities have not made any arrests. The activity is part of a larger effort by North Korea to earn up to $500 million annually to fund its nuclear and weapons programs.
Why it matters
North Korea recruits substitutes in Nigeria, South Africa, India, and Iran for $500 a month to bypass corporate employment checks. These fake IT workers infiltrate U.S. networks to steal data or funds. This infrastructure allows operatives to appear as if they are working from within the United States.
What is confirmed
- The FBI shut down more than 40 North Korean laptop farms.
- Over 200 devices were seized in Texas.
- No arrests have been made so far in the Texas operation.
Still unconfirmed
- Pyongyang uses these sites to earn as much as $500 million annually for nuclear and other weapons programs.
- CrowdStrike helped the FBI identify the laptop farm sites.
What to watch next
- Official announcements of arrests related to the Texas device seizures
- U.S. government reports on the total number of infiltrated American companies
confidence 90%Sources used for this update (3)
- www.tomshardware.com β FBI shuts down over 40 North Korean laptop farms used by fake ...
- www.yahoo.com β FBI shuts down over 40 North Korean laptop farms used by fake ...
- en.wikipedia.org β List of Asian countries by average wage - Wikipedia
-
US Concerned Over North Korea IT Scam Involving Foreign Recruits
The United States faces security concerns as North Korea pays recruits in Nigeria, South Africa, India, and Iran $500 a month. These recruits act as interview substitutes, allowing fake information technology workers to bypass employment checks and infiltrate American corporate networks.
Why it matters
The United States is a country composed of 50 states and a federal district, with Washington, D.C. as its capital. New York is the largest city by population, housing 8.8 million people. The operation exposes vulnerabilities in corporate hiring protocols as foreign operatives leverage proxy interviewees.
What is confirmed
- The United States consists of 50 states and a federal district, with Washington, D.C. as the capital.
- New York is the largest city in the United States by population, with 8.8 million people.
Still unconfirmed
- North Korea pays recruits $500 a month in Nigeria, South Africa, India, and Iran to help fake workers bypass American employment checks.
What to watch next
- Further US federal investigations into corporate IT hiring networks
- Additional disclosures regarding the payment mechanisms used by North Korean operatives
confidence 50%Sources used for this update (3)
- simple.wikipedia.org β United States - Simple English Wikipedia, the free encyclopedia
- govtschemes.org β $2000 Stimulus Payment September 2026 Fact-Check: Is It ...
- www.worldbank.org β Nigeria Development Update (NDU) - World Bank Group
-
US alarmed by North Korea's proxy recruitment for fake IT workers
The US is concerned about North Korea's practice of paying recruits $500 a month in Nigeria, South Africa, India, and Iran to act as interview substitutes for fake IT workers, helping operatives bypass American employment checks and gain unauthorized access to corporate technology networks.
Why it matters
This scheme allows North Korean operatives to penetrate domestic infrastructure by securing remote positions. Recruitment has expanded to Lebanon and other nations to find talent capable of masking the identities of the actual workers. US officials remain alarmed by the use of these proxies. The issue highlights the ongoing threat of North Korea's cyber activities and its efforts to evade security measures.
What is confirmed
- North Korea is paying recruits in Nigeria, South Africa, India, and Iran $500 a month to act as interview substitutes for fake IT workers.
- These intermediaries help operatives bypass American employment checks to secure remote positions and gain unauthorized access to corporate technology networks.
- Recruitment has expanded to Lebanon and other nations to find talent capable of masking the identities of the actual workers.
- US officials remain alarmed by the use of these proxies to penetrate domestic infrastructure.
What to watch next
- Further expansion of recruitment efforts by North Korea
- Increased measures by US companies to prevent proxy interviews
- Actions taken by US law enforcement to disrupt the scheme
confidence 100%Sources used for this update (8)
- www.usbank.com β Personal Banking, Credit Cards, Loans & Investing | U.S. Bank
- www.usbank.com β Mobile & online banking | U.S. Bank
- en.wikipedia.org β List of states and territories of the United States - Wikipedia
- www.usa.gov β The U.S. and its government - USAGov
- www.usmagazine.com β Us: Latest Celebrity News, Pictures & Entertainment
- en.wikipedia.org β United States - Wikipedia
- www.usa.gov β Making government services easier to find | USAGov
- www.cbsnews.com β U.S. News: Latest news, breaking news, today's news stories...
-
North Korea recruits foreign proxies to infiltrate US companies
North Korea is paying recruits in Nigeria, South Africa, India, and Iran $500 a month to act as interview substitutes for fake IT workers. These intermediaries help operatives bypass American employment checks to secure remote positions and gain unauthorized access to corporate technology networks. Recruitment has since expanded to Lebanon and other nations to find talent capable of masking the identities of the actual workers. US officials remain alarmed by the use of these proxies to penetrate domestic infrastructure.
Why it matters
This campaign represents a strategic effort by North Korea to bypass cybersecurity and HR protocols through social engineering. By using native speakers and local talent, the regime avoids the detection typically associated with foreign operatives.
What is confirmed
- North Korea pays recruits $500 a month in South Africa, Nigeria, India, and Iran to serve as interview substitutes.
- Intermediaries help fake IT workers bypass US employment checks to secure remote jobs.
- Recruitment efforts have expanded to Lebanon to find individuals who can mask the identities of actual workers.
- US officials are alarmed that these proxies are used to gain unauthorized access to domestic corporate technology networks.
What to watch next
- Identification of specific US companies infiltrated by these fake workers
- Official US government sanctions targeting the recruitment networks in Lebanon and Asia
confidence 100%Sources used for this update (8)
- en.wikipedia.org β American imperialism - Wikipedia
- www.wtae.com β As the war enters its eight month, Trump rejects Iran's ...
- en.wikipedia.org β IsraelβUnited States relations - Wikipedia
- govtschemes.org β Stimulus Check 2026: Fact-Checking Every Viral Payment Claim ...
- www.newsweek.com β Donald Trump Gives Update on $5,000 Dividend Promise
- garthmonroe.com β The Daily β garthmonroe
- www.cnbc.com β Trump administration starts sending $500 Obamacare refund ...
- www.businessinsider.com β All the Free Money Trump Has Promised β and Where It All ...
-
North Korea Pays Foreign Recruits to Bypass US IT Job Checks
North Korea is paying foreign recruits five hundred dollars a month in South Africa, Nigeria, India, and Iran to act as interview substitutes and help fake IT workers infiltrate United States companies. These intermediaries help bypass American employment checks to secure remote positions. Recruitment has expanded to Lebanon and other countries to find talent capable of masking the true identity of the actual workers. This campaign alarms United States officials as foreign operatives use proxy interviewers to gain unauthorized access to domestic corporate technology networks.
Why it matters
The operation relies on foreign intermediaries to mask the identity of North Korean nationals seeking remote employment in the United States. By using proxies for interviews, the regime bypasses standard verification and employment checks. This tactic allows foreign operatives to secure corporate positions and potentially compromise sensitive technology infrastructure.
What is confirmed
- North Korea pays recruits five hundred dollars a month in Nigeria, South Africa, India, and Iran.
- Recruits act as interview substitutes to help fake workers get into American companies.
What to watch next
- Identification of specific American companies compromised by fake IT workers
- Actions taken by authorities in Nigeria, South Africa, India, Iran, and Lebanon against recruitment cells
confidence 80%Sources used for this update (5)
- www.xe.com β Currency Converter - Currency Exchange | Xe
- en.wikipedia.org β Africa - Wikipedia
- moneypantry.com β 17 Sites That Pay You to Answer Questions in 2026 (Up to $220 ...
- finance.yahoo.com β This Dividend Stock Pays You 12 Times Per Year. Here's What a ...
- www.userinterviews.com β Paid research studies | User Interviews
-
North Korea pays foreign recruits to help fake workers enter US companies
North Korea is recruiting foreign specialists to help fake IT workers infiltrate United States companies. The regime pays recruits $500 a month in India, Iran, Nigeria, and South Africa to act as interview substitutes. These intermediaries help North Korean operatives bypass American employment checks to secure remote positions. Recruitment efforts have also expanded to Lebanon and other countries to find talent capable of masking the identity of the actual workers.
Why it matters
This scheme allows North Korean operatives to gain access to US corporate networks and infrastructure. By using foreign proxies, the regime hides the origin of its workers from security screenings. This activity supports broader efforts to embed covert staff within the US tech sector.
What is confirmed
- North Korea is recruiting foreign talent to help infiltrate US companies.
- The scheme uses foreign specialists to plant fake IT staff in US tech firms.
- North Korea is recruiting workers in Iran and other countries for its remote job scheme.
Still unconfirmed
- North Korea pays recruits $500 a month in Nigeria, South Africa, India, and Lebanon to assist fake workers.
- North Korean interview substitutes are successfully bypassing US employment checks.
What to watch next
- US government sanctions against the identified recruiting networks
- Reports on the specific US companies infiltrated by these fake workers
- Evidence of the financial destination of the funds earned by these fake employees
confidence 85%Sources used for this update (7)
- NBC News β Now recruiting: North Korea looks abroad for talent in its scheme to infiltrate U.S. companies
- qz.com β North Korea's remote job scheme now recruiting workers in Iran, Lebanon, and other countries
- μ‘°μ μΌλ³΄ β North Korea's Interview Substitutes Bypass U.S. Checks
- africa.businessinsider.com β US alarmed as North Korea pays recruits $500 a month in Nigeria, South Africa, India and Iran to help fake workers get into American companies
- LCX Exchange β North Korea using foreign talent to help infiltrate US companies: Report
- logos-pres.md β North Korea is using foreign specialists to infiltrate US companies
- Blockonomi β North Korea Recruits Global Workers to Plant Fake IT Staff in US Tech Companies
Community Sentiment: How do you assess this situation?
Voice your perspective Β· Real-time aggregated sentiment from the Live Feeds community