A North Korean cell of remote workers operated a highly organized employment network that submitted nearly 170,000 job applications and fraudulently secured dozens of positions at U.S. companies, according to a new investigation.

In a report published Tuesday, Nisos — a cyber intelligence firm that specializes in “human risk management” — outlined the operations of a North Korean information technology (IT) worker cell it had infiltrated and tracked since mid-2025.

While the cell’s operations largely showcased tactics and tools seen in previously documented DPRK IT worker campaigns, Nisos’ investigation offered one of the most detailed looks