Thousands of North Korean IT workers are infiltrating corporate America

Thousands of North Korean operatives posing as IT workers are applying for remote jobs at U.S. companies, and many are getting hired.

Using stolen American identities, U.S.-based "laptop farms" and artificial intelligence to write résumés and help answer interview questions, Kim Jong Un’s regime is exploiting the remote work economy to get its workers inside American companies.

In 2024 alone, the sprawling, state-directed workforce generated nearly $800 million for North Korea, according to the Treasury Department , helping the heavily sanctioned regime fund its weapons programs.

"The North Korean regime targets American companies through deceptive schemes carried out by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments," Treasury Secretary Scott Bessent said in a statement.

The threat goes beyond the paycheck.

Once hired, the workers gain legitimate credentials and trusted access to corporate networks, potentially opening the door to theft, espionage, extortion and more sophisticated North Korean cyber operations.

Fox News interviewed Michael "Barni" Barnhart, a former Army intelligence specialist turned cybersecurity threat hunter who tracks North Korean IT workers for a living .

Barnhart said the workers are so pervasive that when he recently sampled 20 Fortune 500 companies, he found evidence that North Korean IT workers had applied to, worked for or targeted 18 of them.

Barnhart has spent much of his career hunting America’s adversaries.

He joined the Army as a teenager, training in human intelligence before moving into signals intelligence and counterterrorism and deploying to Iraq .

He later moved into cybersecurity, eventually helping build Mandiant’s North Korea-focused threat hunting operation before the company was acquired by Google.

Now at cybersecurity firm DTEX, Barnhart focuses on nation-state insider threats, including the sprawling North Korean IT worker operation.

His pursuit of North Korean hackers has even left a permanent mark.

Barnhart has tattoos on his feet commemorating North Korean hacking groups he has helped investigate, including APT43 and APT45, groups tied to operations targeting U.S. think tanks and healthcare organizations.