North Korea infiltrates US firms using third-country IT workers

North Korea is utilizing remote IT workers from countries like Iran and Lebanon to infiltrate US companies and fund weapons programs. Reports indicate these workers are recruited via LinkedIn and paid in cryptocurrency to act as interview proxies. Cybersecurity firm CrowdStrike noted that North Korea-linked hackers caused over $2 billion in crypto losses in 2025, a 51% increase year-over-year.