Amazon.com Inc. (AMZN) is dealing with an unusual security problem: North Korean operatives trying to land remote IT jobs using fake identities. The company says it blocked more than 1,800 suspicious applications from people suspected of working for Pyongyang, according to BBC reports.
This isn't just about resume fraud. The goal is to get hired, collect paychecks, and funnel that money back to North Korea to fund weapons programs. It's an elaborate scheme that involves stolen American identities and what security experts call "laptop farms."
The Laptop Farm Operation
Stephen Schmidt, Amazon's chief security officer, laid out the details in a recent LinkedIn post. He explained that North Korean operatives often partner with people who manage laptop farms, which are essentially computers physically sitting in the United States but controlled remotely from abroad.
The setup lets North Korean workers appear to be working from American locations while they're actually operating from thousands of miles away. Schmidt noted that these fake applications are likely hitting other U.S. tech companies too, not just Amazon.
What's particularly concerning is the trend line. Schmidt said suspected North Korean job applications have jumped almost a third in the past year alone.
A Government Crackdown
U.S. and South Korean authorities have been onto this scheme for a while. The Department of Justice has identified 29 laptop farms operating illegally across the country, all run by North Korean IT workers using stolen American identities.
Authorities have also gone after the middlemen, indicting U.S. brokers accused of helping North Korean operatives get hired at American companies.
Real Consequences
The penalties are serious. In July, an Arizona woman was sentenced to more than eight years in prison for running one of these laptop farms. The Justice Department said her operation generated over $17 million for her and North Korea's government.
That's real money flowing to Pyongyang's weapons programs, which is why federal authorities are treating this as both a fraud and national security issue. For tech companies, it's a reminder that remote hiring comes with new security challenges that go way beyond verifying someone's college degree.
