North Korea-linked IT Workers Are Getting Hired Inside Western Companies
Huntress documented five DPRK-linked FAMOUS CHOLLIMA workers hired by Western companies in 2026 using fake identities, proxies and laptop farms.
55
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 28, 2026
- Last mentionedSep 1, 2026
Timeline
3 articles · newest firstNorth Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
North Korea's IT worker scheme (Famous Chollima/PurpleDelta) has expanded from IT into healthcare, sales, and financial services roles worldwide.
65
North Korean remote workers are broadening their job hunt beyond IT
Huntress links suspected North Korean remote workers to sales, marketing, and healthcare jobs using stolen identities, VPNs, proxies, and KVM hardware.
58
Appears with
- Huntressvendor · 3
- Famous Chollimathreat actor · 2
- Fortune 500 companiesorganization · 1
- Nickel Tapestrythreat actor · 1
- Wagemolethreat actor · 1
- Astrill VPNproduct · 1
- UNC5267threat actor · 1
- PurpleDeltathreat actor · 1
- IPRoyal Proxyproduct · 1
- Guermok USB capture cardproduct · 1
- AnyDeskproduct · 1
- Huntressorganization · 1
- North Korea (DPRK)threat actor · 1
- Jasper Sleetthreat actor · 1
- TrustID Cardproduct · 1
- North Koreaorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.