North Korean IT workers use AI for fraudulent US and UK employment
Wall Street Journal investigated a North Korean organization that used AI tools including ChatGPT and facial morphing software to fraudulently obtain remote IT positions at US and UK companies. The FBI confirmed arrests and prosecutions of 39 individuals involved in the scheme, which generated millions of dollars for North Korea's weapons programs.
What happened
A North Korean organization using the codename 'Eagle Vision' recruited IT workers to fraudulently obtain remote employment at US and UK companies. Over three months, the organization submitted more than 1,000 job applications and received at least 9 job offers.
North Korean workers used ChatGPT to prepare interview answers and AI facial morphing tools to alter their appearance during video interviews. Once hired, North Korean workers remotely accessed computers sent to US-based accomplices, who received payments and attended company meetings on their behalf.
Reported impact
North Korean IT workers earned up to $300,000 annually through this scheme, with up to 90% of earnings flowing to the North Korean regime for weapons and missile development programs. The FBI stated that millions of dollars were being funneled to North Korea's weapons of mass destruction and missile programs.
American citizens had their identities stolen and misused for bank account creation, loan applications, and property rentals. An Ohio resident shared income from a $75,000 salaried position with North Korean operators.
Index analysis
The WSJ investigation tracked browser history, emails, stolen personal information, and meeting recordings from the organization over more than a year. The FBI arrested or prosecuted 39 individuals involved in the scheme, including North Korean IT workers and US-based accomplices.
The FBI identified the largest known 'laptop farm' containing approximately 100 computers and stated that thousands of Americans would be required to operate all laptop farms if they each contain dozens of devices.
Governance controls
The FBI worked to identify and prosecute the North Korean workers and their US-based network. The Wall Street Journal's investigation led to identification of cryptocurrency wallets linked to entities sanctioned by the US for weapons programs.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.