Researchers pose as a start-up to study fake North Korean job applicants

Researchers set up a fake start-up company to study fraudulent North Korean IT workers. The company was a trap of sorts. It was built to attract these workers so the researchers could watch how they operate. The news was shared on October 28, 2026, by Schneier on Security, a well-known security blog.

Who it affects

The workers in question are North Korean IT staff who apply for remote jobs under false identities. In other words, the person who applies and interviews may not be who they claim to be.

Any business that hires remote workers could be a target. That includes small companies and start-ups. The practical point is simple: check identities carefully before anyone gets access to your systems, files or accounts.

What is not known yet

The blog post is very short. It describes the experiment in a single sentence and links to the full research. That means key details are not available here. It is not clear how long the study ran, how many applicants showed up, or what the researchers learned about their methods.

Those answers should be in the linked research. Until it is read in full, the main takeaway is the one already clear from the post. Fake applicants of this kind are real enough that researchers built a company just to study them.