CNN reports that thousands of North Korean IT workers use stolen or fabricated U.S. identities to pose as Western developers, engineers, and technology consultants. The operation relies on AI-generated resumes and headshots, face-masking tools, VPNs, remote-work software, translation tools, and rehearsed interview support to pass hiring processes and blend into U.S. workplaces. U.S.-based facilitators help steal identities, launder paychecks, operate laptop farms, and provide corporate laptop access so workers abroad can appear to be operating domestically. The scheme generates revenue for Pyongyang despite sanctions and exposes employers to sanctions, insider-risk, and national-security concerns.