Thousands of North Korean IT workers have infiltrated the Fortune 500—and they keep getting hired for more jobs

North Korean IT workers use AI to create bios with eye-catching company experience highlighted.

They work in teams to apply for jobs en masse, using stolen American identities.

Experts predict the scope and scale will expand in 2025 , moving across Europe and Asia with well-honed social engineering tactics paired with aggressive job hunting at European defense and government companies.

CrowdStrike reports North Korean IT workers were behind 304 incidents in 2024 .

CrowdStrike predicts Famous Chollima will continue its campaigns in 2025 .

The group has two main tentacles: a malware operation that focuses on intelligence collection and crypto theft.

The other is the IT workers scam in which North Korean engineers get legitimate jobs and remit their salaries to North Korea to fund nuclear weapons.

Gartner : Companies have to do more than just shipping a laptop out to remote workers.

Payoneer told Fortune it proactively works to combat fraud and financial crime on its platform through robust compliance systems and that it works closely with both regulators and law enforcement.

In a statement to Fortune , the company said it works with law enforcement to combat financial crime.