What happened?

The U.S. Justice Department announced that sanctioned North Korean hackers have infiltrated dozens of U.S. companies. According to the statement, these groups are increasingly using Americans as intermediaries between breached companies and Pyongyang.

Why it matters

The warning shows that state-sponsored cyberattacks are shifting beyond technical intrusion toward recruiting and directing people inside companies. Officials say these individuals may help North Korean operations either knowingly or unwittingly.

What companies should do

Experts stress that employees should be cautious about foreign-linked job offers and suspicious communications. Organizations are advised to tightly control access privileges and monitor unusual network activity.