Recently, it was discovered that numerous crypto companies have inadvertently hired developers and IT workers from North Korea, which is heavily sanctioned. This has serious implications, including potential legal violations and security risks.
The Democratic People's Republic of Korea has been linked to several high-profile hacks, and it appears that some of these employees have enabled the projects they worked for to be compromised. This is not an isolated issue, as there have been previous instances of North Korean IT workers being employed by US companies, often unknowingly. The employees typically send a significant portion of their earnings back to the North Korean regime, which uses the funds to support its activities. Companies that hire North Korean workers risk violating US sanctions laws, and those that are compromised by vulnerabilities inserted by these employees may also lose funds to the regime.
To mitigate these risks, companies must be vigilant when hiring and ensure they are not inadvertently supporting the North Korean regime. The US government has been lenient in prosecuting companies that have unknowingly hired North Korean workers, but it is essential for companies to take proactive steps to prevent such incidents in the future.