North Korea funds itself with fake employees infiltrating tech companies. And they’re already targeting Europe, according to Google.

For years, North Korea has maintained a sophisticated network of undercover cybercriminals operating from abroad to fund Kim Jong Un’s regime. While the United States has so far been the primary target of this cyber operation, recent efforts by U.S. law enforcement to dismantle these networks have pushed these operatives toward a new front: Europe.

Who are these fake IT workers?
For years, North Korea has deployed thousands of IT workers abroad, especially remotely, to generate revenue for its weapons program. According to a recent report by the Google Threat Intelligence Group, this expansion includes infiltration into key sectors such as defense, artificial intelligence, blockchain, and web development.

The scheme involves obtaining legitimate jobs using false identities, operating from allied countries—such as China, Russia, and Laos—and diverting their salaries to Pyongyang.