North Korean operatives caught infiltrating Australian workplaces

29 March 2026 — North Korean operatives are fraudulently securing jobs at Australian companies and using those wages to help fund the regime’s weapons program.

DTEX, a risk-adaptive security and behavioral intelligence firm, has helped expose a North Korean operative attempting to secure an Australian role under false pretences during a staged remote job interview.

DTEX says the operative is one of thousands of undercover agents driving a global criminal operation designed to evade sanctions and generate revenue for the North Korean regime.

For corporate Australia, the threat is not just fraud — it is a direct insider risk with serious national security and supply chain implications. Once inside, these workers may gain access to sensitive systems, proprietary data, intellectual property and trusted supply chains that support essential services.

The undercover sting was brought into public view by 60 Minutes Australia during its Sunday broadcast on 29 March. In the program, journalist Nick McKenzie poses as a recruiter for an Australian development role. A suspected facilitator linked to known DPRK schemes appears for the interview, offering a rare on-camera glimpse into an operation built on deception, access, and scale.

The broadcastalso features Australian Security Intelligence Organisation (ASIO) Director-General of Security Mike Burgess AM addressing the threat.

DTEX investigators first drew attention to the Democratic People’s Republic of Korea (DPRK) threat in early 2025 through its landmark report, Exposing DPRK’s Cyber Syndicate and Hidden IT Workforce. In the report, the company warned that the threat was not confined to the US and outlined practical indicators of compromise, including email addresses organisations can use to identify suspected operatives before they are hired. DTEX identified 87 unhired applicants from that list alone.

DTEX investigators estimate DPRK-linked IT workers generate about AU$864 million annually worldwide, but say the true figure is likely far higher given the scale and reach of the networks involved.

“These are not ordinary job applicants,” said Mohan Koo, President and Co-founder of DTEX. “This is a state-linked operation designed to get people inside real businesses, generate money for the regime and create opportunities for further compromise. Australian organisations need to treat this as both an insider threat and a national security issue.”

DTEX warns the tactics are evolving quickly and becoming harder for employers to detect. Investigators are seeing AI used to create more convincing résumés and online profiles, making fraudulent candidates look more legitimate from the outset. Remote screening is also getting harder: deepfake imagery, voice synthesis, AI-enabled noise cancellation, accent-softening tools and real-time response aids can all help disguise identity and make traditional checks less reliable. In some cases, operatives also use subcontractors or third-party firms to gain indirect access to larger organisations.

“Australian organisations need expert capability to catch risk early, especially in the growing space between human and AI-enabled activity,” Koo said. “Better identity verification, stronger screening and awareness of known indicators can help stop these operatives before they are hired. But if they get in, employers need to detect unusual behaviour quickly and respond before access is used to steal data, misuse systems or compromise the wider supply chain.”

A spokesperson is available for interviews.

About DTEX

DTEX is the leader in risk-adaptive security, unifying human, data, and AI risk through a behavioral intelligence platform. Built for enterprise scale, it detects threats early and prevents breaches. Organizations and governments worldwide rely on DTEX to protect sensitive data, accelerate innovation, and safeguard trust with privacy-by-design telemetry and adaptive controls. The DTEX Platform integrates Insider Risk Management, Data Loss Prevention, User and Entity Behavior Analytics, User Activity Monitoring, and AI security into one cohesive solution. 

To learn more about DTEX, please visit dtex.ai 

Connect with DTEX: LinkedIn | X | YouTube

Contact
Jamie Lindsay
DTEX VP, APAC and Japan
+61 413 487 768
[email protected]