{"id":374910,"date":"2026-07-31T22:46:43","date_gmt":"2026-07-31T17:16:43","guid":{"rendered":"https:\/\/ebiztoday.news\/?p=374910"},"modified":"2026-07-31T22:46:43","modified_gmt":"2026-07-31T17:16:43","slug":"canada-allies-warn-north-korea-it-staff-pose-insider-threat-abroad-national","status":"publish","type":"post","link":"https:\/\/ebiztoday.news\/index.php\/2026\/07\/31\/canada-allies-warn-north-korea-it-staff-pose-insider-threat-abroad-national\/","title":{"rendered":"Canada, allies warn North Korea IT staff pose \u2018insider threat\u2019 abroad – National"},"content":{"rendered":"

<\/p>\n

\n

Canada and 10 of its closest allies issued a warning Friday that North Korean IT staff pose an \u201cinsider threat\u201d by remotely obtaining work and income abroad to fund the rogue regime\u2019s nuclear and ballistic weapons programs.<\/p>\n

The joint advisory says the distant employee scheme is an element of a broader effort to evade international sanctions, and urged countries and firms to \u201cdeepen their understanding\u201d of the tactics used and implement measures to counter them.<\/p>\n

It adds North Korea \u201chas increased connectivity with the international economic system through diversified revenue generation activities, including IT employee schemes,\u201d despite those sanctions and efforts to strengthen them.<\/p>\n

Global Affairs Canada and the RCMP were joined by foreign affairs departments and police forces from its Five Eyes partners Australia, Recent Zealand, the U.S. and the U.K., together with South Korea, Japan, France, Italy, Germany and the Netherlands.<\/p>\n

\n

Story continues below commercial<\/p>\n<\/p><\/div>\n

\n
\n
\n\t\t\t\t\t
\n\t\t\t\t\t\t\"Click
\n\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

\t\t\t\t\t\t<\/span>
\n\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/div>\n<\/p><\/div>\n<\/p><\/div>\n

In accordance with the advisory, North Korean IT staff will falsify their nationality or identity to register for online accounts and seek employment.<\/p>\n

The employees are \u201cincreasingly likely\u201d to make use of third-party proxies to create those accounts on their behalf, in addition to take part in job interviews \u201cand even establish in-person contact to create a false sense of trust and acquire work contracts,\u201d the advisory adds.<\/p>\n

\n
\n\t\t\t\t\"Get\n\t\t\t<\/div>\n
\n

Get breaking National news<\/h2>\n

Get breaking Canada news delivered to your inbox because it happens so you will not miss a trending story.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n

\u201cNorth Korean IT staff employ increasingly sophisticated methods, including the combination of AI, to obfuscate their identities and expand their activities globally,\u201d it says.<\/p>\n

\u201cThese staff hunt down contracts with the intent of remitting their salaries to their parent North Korean agencies. Additionally they pose an insider threat to firms and are involved in data exfiltration, cryptocurrency theft, and theft of sensitive information.\u201d<\/p>\n

Once employed, the North Korean IT staff will often try to avoid being paid by direct deposit and as a substitute request payment through either money transfer or cryptocurrency. The advisory says third-party bank accounts are sometimes used to receive payments, that are then transferred by a proxy to a chosen foreign account for a fee.<\/p>\n

\n

Story continues below commercial<\/p>\n<\/p><\/div>\n

The advisory notes the employees have \u201chigh-level\u201d IT skills and are searching for work in wider areas, including web page and mobile app development, software and blockchain services.<\/p>\n

\n
\n
\n\t\t\t\t\t
\n\t\t\t\t\t\t\"Click
\n\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

\t\t\t\t\t\t<\/span>
\n\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/div>\n<\/p><\/div>\n<\/p><\/div>\n

It adds that North Korean IT staff can also use VPNs and other software tools to hide their true location or run \u201claptop farms\u201d that receive company-provided laptops for staff to access remotely. Staff often reside in North Korea, China, Russia, and Southeast Asian and African countries.<\/p>\n

\n

\n\t\t\t