The employer.
A senior engineer. Good CV, good interview, the passport scans. Six weeks later the laptop you posted to Manchester is being driven from Pyongyang, with your source code on it.
Not fiction. In July 2026 eleven governments, the United Kingdom among them, issued a joint alert on North Korean IT workers getting hired under identities that are not their own, using forged documents, third-party proxies and AI to cover their tracks. It asks the platforms people are hired through to strengthen identity verification, and it names strict review of identification documents and in-person interviews.
