North Korean Defector Reveals Covert IT Scheme Funding Regime

In a striking exposé, a North Korean defector shares his experience of working covertly in IT, illustrating how these illicit operations bolster Kim Jong-un's regime financially.

Jin-su, a North Korean defector who spoke with the BBC, recounted his harrowing experience of working abroad in IT as part of a clandestine operation that funds the North Korean regime. Using numerous fake identities over the years, he managed to land remote jobs with Western companies, earning upwards of $5,000 per month. Jin-su, who requested anonymity for safety reasons, represents countless others who have been dispatched internationally to earn cash for a regime that has faced persistent global sanctions.

Under the watchful eye of the government, Jin-su detailed how an estimated 85% of his earnings were mandated to be sent back home, affirming that while he was aware of the exploitative nature of this scheme, it nonetheless felt like a step-up from his previous life in North Korea. Reports from the UN suggest that this shadowy operation generates between $250 million to $600 million annually for the regime, particularly flourishing during the pandemic due to an increase in remote work opportunities.

While in China, Jin-su meticulously crafted fraudulent identities, deceiving hiring managers around the world. He would target individuals from the UK and other Western countries to illegally acquire identities that would increase his chances of employment. "You can easily convince them to pass on their identities," he claimed, emphasizing a common trend among his fellow workers.

This operation is distinct from more notorious hacking efforts attributed to North Korea, although some defector accounts hint at workers engaging in data theft alongside their regular employment. Last year, the U.S. indicted a group of North Korean individuals allegedly involved in exploiting U.S. firms for substantial financial gains.

Despite the oppressive nature of his preceding conditions, Jin-su disclosed that many North Korean IT workers do not consider defection due to the perceived risks and deep familial ties. After successfully escaping, Jin-su continues to work in the IT sector but now operates legally, with a sense of satisfaction in earning what he calls "honest money."

The broader issue of North Korean operatives infiltrating global job markets has raised alarms within the cybersecurity community, prompting hiring managers to develop strategies to identify potential impostors. As authorities continue to monitor these activities, the plight of North Korean workers remains a stark reminder of the regime’s reliance on covert operations to sustain its economy amid crippling sanctions.