Did you know that North Korea is funding its regime by sending covert IT workers around the globe? Meet Jin-su, a former secret IT worker who has lived to tell the tale of deception and survival.

In a shocking revelation, Jin-su shared his experiences working for North Korea’s clandestine operations, using countless fake identities to land remote IT jobs with Western companies. His story unveils a hidden world where desperation meets technology, and the stakes are higher than ever.

Jin-su, whose name has been changed to protect his identity, disclosed to the BBC that he, along with thousands of others, was dispatched to countries like China, Russia, and various African nations. Their mission? To raise critical funds for a regime that has been under heavy international sanctions for years. Operating in the shadows, these workers typically earn around $5,000 (£3,750) monthly, with a staggering 85% of their income funneled back to finance North Korea's oppressive government.

“We know it’s like robbery, but we just accept it as our fate,” Jin-su reflected, painting a bleak picture of life under a regime that offers little hope. “It’s still much better than when we were in North Korea.” The harsh reality is that these secret IT workers generate an estimated $250 million to $600 million annually, a figure that has exploded during the pandemic as remote work became the norm.

But the situation is even more alarming. While many are just trying to earn a living, some rogue workers have resorted to stealing data or hacking their employers to demand ransom. A recent US court indictment revealed the shocking case of 14 North Koreans who allegedly extorted $88 million from American firms over six years, showcasing the dark side of this operation.

Jin-su recounted the daunting lengths they went to secure fraudulent identities. He often impersonated a Chinese national to reach potential identity donors in countries like Hungary and Turkey, offering them a cut of his earnings. “If you put an 'Asian face' on that profile, you'll never get a job,” he said, illustrating the lengths to which these workers must go just to survive.

With limited internet access back home, these IT operatives found that working abroad allowed them greater freedom, although they constantly risked exposure. As Jin-su explained, the extensive international sanctions against North Korea—notably due to its nuclear ambitions—forced them to disguise their nationality to secure better pay. This operation is distinct from the notorious hacking activities carried out by groups like Lazarus, which is believed to have stolen over $1.5 billion from cryptocurrency firms.

Jin-su's accounts were given during a video call from London, where his safety was a primary concern. He described how he initially targeted the US job market, primarily due to the higher salaries offered by American companies. Despite the risks, many North Korean IT workers have been successful in landing jobs, sometimes even getting hired by the same company without the employer's knowledge. “It happens a lot,” he admitted.

Hiring managers in cybersecurity and software development have reported encountering numerous candidates they suspect to be North Korean. Rob Henley, co-founder of Ally Security, noted he interviewed around 30 suspected North Korean IT workers. He grew increasingly frustrated, turning to video calls to verify daylight in their locations—a strategy that often led to disappointment.

The bizarre world of North Korean IT operatives has drawn attention from various quarters, with some candidates even believed to be using AI to disguise their identities during interviews. Despite the mounting evidence, attempts to reach the North Korean embassy in London for comment went unanswered.

As the world grapples with the implications of this underground economy, one thing remains clear: the lengths to which people will go for survival, even when it means playing a part in a system that exploits them.