As cited
Copy frozen at (site build).
threat intel
Silent Push Exposes North Korean IT Worker Recruiting Facilitators Through Discord Servers
Security researchers at Silent Push uncovered a North Korean IT worker using Discord and Telegram to recruit Western and Latin American nationals as proxies to bypass sanctions and geographic hiring restrictions. The scheme uses identity fraud, remote desktop access during technical interviews, and revenue-sharing arrangements to enable North Korean workers to obtain legitimate employment while evading Office of Foreign Assets Control (OFAC) compliance controls. Victims face insider threats, data exfiltration, intellectual property theft, and severe sanctions exposure.
Why it matters: Hiring teams and remote employers must verify applicant physical locations during interviews and screen for proxy recruitment patterns, as unknowingly engaging North Korean IT workers through intermediaries creates direct OFAC sanctions liability and post-hire insider threat risks including code theft and extortion.
- Source published
- First seen by Cybersecurity Tracker