North Korean IT Workers Infiltrate Tech and Crypto Projects, Pocket Over $16 Million

Key Points

1. Over $16.58 million has been sent to North Korean IT workers in 2025, averaging $2.76 million per month.

2. These workers earn between $3,000 and $8,000 per month, suggesting 345 to 920 compromised jobs.

3. They use Russian IP addresses while claiming to be based in the U.S., frequently change GitHub usernames, and delete LinkedIn profiles after securing jobs.

4. Many fail basic KYC checks but still access regulated platforms like Circle and U.S.-based exchanges.

5. Startups are at high risk due to prioritizing cost-cutting over background checks, creating an environment ripe for exploitation.