{"id":609633,"date":"2026-09-23T22:32:11","date_gmt":"2026-09-23T22:32:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/609633\/"},"modified":"2026-09-23T22:32:11","modified_gmt":"2026-09-23T22:32:11","slug":"north-korean-operative-posing-as-it-contractor-hired-by-nz-business","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/609633\/","title":{"rendered":"North Korean operative posing as IT contractor hired by NZ business"},"content":{"rendered":"<p class=\"body-paragraph articleLinkText  [&amp;_p]:tit-sub-xl tit-sub-xl md:[&amp;_p]:d-tit-sub-xl md:d-tit-sub-xl mb-[1.3rem]\">A North Korean operative posing as a remote IT contractor was unknowingly hired by a New Zealand business using a fake identity and a local recruit to receive and operate the company&#8217;s laptop.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The ruse was part of a global operation in which North Korean workers secure jobs with overseas companies, generating hundreds of millions of dollars for the regime&#8217;s nuclear weapons and missile programmes.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">&#8220;During the year a large New Zealand business became suspicious of the identity details of an IT contractor working remotely,&#8221; according to the National Cyber Security Centre&#8217;s (NCSC) Cyber Threat Report 2026.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The business, which is not identified in the report, contacted the NCSC and New Zealand Police, with investigators determining the worker was from North Korea.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">&#8220;The IT workers use identity masking technology to hide their North Korean identity when securing contracts for remote work,&#8221; the report said.<\/p>\n<p class=\"text-greyDarkFaded\">The National Cyber Security Centre is warning of foreign interference and how powerful AI could supercharge cyber criminals.   (Source: Breakfast)<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">Investigators found the worker had used a New Zealand address and recruited a New Zealand citizen.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">After the contract was terminated, the worker claimed to have obtained commercially sensitive information and threatened to release it unless they were paid.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The case mirrored so-called &#8220;laptop farm&#8221; schemes uncovered globally, where local intermediaries receive and operate company-issued devices on behalf of North Korean workers, helping disguise their true location.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">&#8220;This kind of activity is subject to UN sanctions which have effect under New Zealand law and also creates risks of espionage and extortion for businesses that are targeted,&#8221; NCSC Deputy Director-General Catriona Robinson said.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">In July, New Zealand joined the United States, United Kingdom, Australia, Canada, Japan and several European countries in a joint warning that North Korean IT workers were using false identities to secure remote jobs and evade sanctions.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">US authorities say the scheme generated US$800 million (NZ$1.4 billion) in 2024.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The NCSC recommends employers consider interviewing potential staff face-to-face and require new hires to pick up IT equipment personally.<\/p>\n<p>AI boosts speed, scale and sophistication of cyber-attacks<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/nz\/wp-content\/uploads\/2026\/09\/hooded-phone-generic-phone-LD6PWSKPTJHVNEE4I4BHW4I42Q.jpg\" alt=\"A hooded man holding a phone. \" width=\"800\" height=\"449\" loading=\"lazy\"\/><\/p>\n<p class=\"ImageMetadata__MetadataParagraph-sc-hi5x8q-0 cWTYyG image-metadata\">A hooded man holding a phone.  (Source: istock.com)<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The case is one of several emerging threats highlighted by the NCSC, which warns artificial intelligence is rapidly reshaping the cyber threat landscape.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">\u201cAI offers many opportunities, but it is already being used by malicious actors to increase the speed, scale and sophistication of cyber-attacks,\u201d Robinson said.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The agency said that by early 2027, malicious actors may have access to advanced AI capabilities currently available only through the world&#8217;s leading frontier AI models.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The NCSC warned disruptive cyber incidents could occur with little warning.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">\u201cAs well as the harm they cause to businesses, these attacks cause harm to New Zealanders whose personal information is stolen and potentially sold to other criminals or malicious actors.\u201d<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">Robinson said it was up to chief executives and senior leaders to manage cyber security within their organisations and to \u201cprepare now\u201d.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The report also highlights a sharp increase in the severity of cybercrime.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">Of the 369 incidents of potential national significance handled by the NCSC during 2025\/26, 162 were linked to criminal or financially motivated actors, up 18% on the previous year.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">In the same period, four incidents were classified as \u201chighly significant\u201d \u2013 the same number as the previous decade combined.<\/p>\n<p class=\"body-paragraph articleLinkText  lg mb-4\">The Manage My Health data breach, which saw more than 99,000 patient records stolen, was among the major incidents highlighted in the report. <\/p>\n<p class=\"text-greyDarkFaded\">The morning&#8217;s headlines in 90 seconds, including two people rescued from the bottom of a cliff, how AI might kill us all, and the dramatic moment two military pilots eject from their plane.  (Source: 1News)<\/p>\n","protected":false},"excerpt":{"rendered":"A North Korean operative posing as a remote IT contractor was unknowingly hired by a New Zealand business&hellip;\n","protected":false},"author":2,"featured_media":609634,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[2300,67,42,43,145,40,38,41,39],"class_list":["post-609633","post","type-post","status-publish","format-standard","has-post-thumbnail","category-headlines","tag-asia","tag-crime-and-justice","tag-headlines","tag-news","tag-technology","tag-top-news","tag-top-stories","tag-topnews","tag-topstories"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/609633","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=609633"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/609633\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/609634"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=609633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=609633"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=609633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}