BBC reporting based on a rare interview with a defector describes North Korean IT workers using fake or borrowed identities to obtain remote jobs at Western companies. Jin-su said teams abroad in China, Russia, Africa, and elsewhere targeted US and European employers, used freelancer platforms and Slack-heavy workflows, and sent about 85% of earnings back to the regime. The piece cites UN and legal reporting that the scheme can generate hundreds of millions of dollars annually and sometimes expands into data theft, hacking, extortion, or cryptocurrency-company infiltration. It matters for defenders because hiring pipelines, identity checks, payment facilitators, and remote-work access can become exposure points for DPRK revenue generation and potential follow-on compromise.