Heightened cybersecurity risks posed by North Korean IT workers impersonating non-DPRK Nationals

Based on our experience in recent client matters, we have seen an escalating threat posed by the Democratic People’s Republic of Korea (DPRK) information technology (IT) workers engaging in sophisticated schemes to evade US and UN sanctions, steal intellectual property from US companies, and/or inject ransomware into company IT environments, in support of enhancing North Korea’s illicit weapons program.