2024-10-01-security-advisory.pdf (218 KB)

Germany's security advisory warns that North Korean intelligence services use undercover remote IT workers to earn foreign currency for the regime. The activity targets companies worldwide through freelancer or remote-work arrangements and can expose employers to intellectual property theft and internal data loss. The advisory frames the risk as both operational and compliance-related, noting possible reputational damage and legal consequences from sanctions violations. Defenders are advised to scrutinize freelance hiring and remote worker vetting where North Korean IT worker activity may be involved.