How North Korea Infiltrated U.S. Tech

A friendly face on a morning Zoom call could actually be part of a North Korean operation using a stolen American identity, and the paycheck from that supposedly ordinary remote job could ultimately help fund the regime’s nuclear and ballistic-missile programs. The scale of the scheme became clear when FBI agents raided Christina Chapman’s Arizona home in 2023 and discovered roughly 90 corporate laptops, many labeled with the names, companies, and passwords of supposed American employees. Behind those machines were overseas IT workers using stolen identities, fabricated résumés, AI-generated applications, ChatGPT-assisted interviews, deepfake video, and American facilitators to convince companies they were hiring legitimate U.S.-based programmers. Once hired, company laptops were shipped to addresses inside America, where remote-access software allowed workers thousands of miles away to operate them while appearing to corporate networks as if they were physically in the United States. The operation became even more scalable by splitting a single fake employee between different people handling interviews, coding, meetings, and physical access to the computer, allowing some workers to secretly hold multiple jobs simultaneously and earn hundreds of thousands of dollars. But the consequences extended far beyond the companies being deceived: Americans such as Michael Brown discovered jobs, income, retirement accounts, and financial records created under identities they never authorized, leaving them to prove they were the real victims. With recent estimates cited in the script putting North Korea’s IT-worker operation at around $800 million, this is the disturbing story of how stolen identities, remote work, AI, and ordinary company laptops were combined to create a hidden workforce operating inside Western companies without ever needing to physically enter the country.