North Korean operative used fake identity to secure New Zealand remote job
Thursday 24 September 2026 · 4 outlets · 3 reports · updated In this story National Cyber Security Centre
A North Korean IT worker used fake credentials and a local recruit to obtain a remote position with a New Zealand company. The National Cyber Security Centre reports the operative allegedly stole sensitive information and attempted blackmail to fund the North Korean regime.
Key facts
5 facts
- North Korean worker used a New Zealand citizen to operate a company laptop.
- The NCSC identified the worker as being from North Korea after the business became suspicious.
- The worker threatened to release sensitive information if a ransom was not paid.
- 23% of incidents of potential national significance in 2025/26 had suspected state-sponsored links.
- China is the most persistent and capable state actor in New Zealand cyber activity.
The full story
1 min read · 3 outlets
A North Korean IT worker used fake credentials and a false persona to clandestinely obtain a remote job with a large New Zealand business. The worker used fake identity documents, a New Zealand address, and a New Zealand citizen to receive and operate the company's laptop.
The National Cyber Security Centre (NCSC) stated this was likely part of a global scheme to generate revenue for the North Korean regime's weapons programmes. After the business terminated the worker's employment, the individual threatened to release commercially sensitive information unless a ransom was paid.
NCSC Head Catriona Robinson noted that the person paid to receive the laptop had been spoken to by police. It remains unclear if the New Zealand citizen knew they were assisting the regime.
The NCSC reported that China is the most persistent and capable state actor undertaking cyber activity in New Zealand. Nearly a quarter of incidents of potential national significance in the 2025/26 year had suspected state-sponsored links.
Where reports differ
- One report states the worker was from North Korea, while another refers to them as an operative.
- The NCSC Head is referred to as Head in one report and Deputy Director-General in another.
Compiled from reports by Stuff, 1News and Otago Daily Times.