0
North Korean flag. South Korea, the U.S., and Japan on August 27 pledged to strengthen cooperation against illicit activities of North Korean IT workers abroad. / Source: Reuters-Yonhap News

South Korea, the United States, and Japan issued a joint statement on August 27 pledging to intensify cooperation against the growing threat posed by North Korea’s overseas IT workforce, which they say is generating revenue for Pyongyang’s weapons programs.

The statement expressed “serious concern over the evolving malicious activities of North Korean IT workers” and reaffirmed the three countries’ commitment to coordinated government action and deeper public–private collaboration.

According to the statement, North Korea continues to deploy IT specialists abroad in violation of UN Security Council resolutions. The regime funnels the income into its illegal weapons of mass destruction (WMD) and ballistic missile programs. North Korean operatives reportedly disguise their identities and locations using AI technology, and secure contracts from clients across North America, Europe, and East Asia by posing as freelance developers.

“North Korean IT workers are often directly involved in malicious cyber activities, particularly in the blockchain sector,” the governments said. “Hiring, supporting, or outsourcing to them carries grave risks, including theft of intellectual property, sensitive information, and funds, as well as reputational damage and potential legal consequences.”

The three countries highlighted recent measures taken individually and collectively. Japan updated its public advisory to detail new tactics used by North Korean workers and warned businesses against inadvertently hiring or subcontracting to them. The U.S. imposed sanctions on four individuals and entities in Russia, Laos, and China accused of facilitating such activities. South Korea has issued its own advisories to help companies avoid becoming targets or victims.

The joint statement underscores a growing trilateral effort to tighten the net around North Korea’s covert cyber and IT operations, which remain a key source of funding for its sanctioned weapons programs.