Back to Feed
Nation-stateAug 26, 2026

Huntress Uncovers Five Cases of North Korean Operatives Posing as Remote IT, Sales and Healthcare Workers

Huntress reports five North Korean operatives hired as remote IT, sales, and healthcare workers in 2024.

Summary

Cybersecurity firm Huntress disclosed five confirmed incidents in which suspected North Korean operatives successfully infiltrated legitimate organizations using false identities and posing as remote workers. The cases reveal expansion of North Korea's remote worker scheme beyond IT roles into sales and healthcare positions. The campaign demonstrates sophisticated social engineering and identity fraud tactics used by state-sponsored actors to gain access to corporate networks.

Entities

Huntress (vendor)North Korea (threat_actor)North Korean Remote IT Worker Scheme (campaign)