Cyber risks of Democratic People's Republic of Korea IT workers to New Zealand organisations

This section contains time sensitive announcements about specific cyber threats, vulnerabilities and scams. Each alert has information you need to be aware of, and what actions to take to mitigate any risk to you or your organisation.

Subscribe to our updates to be notified as soon as we publish an alert.

10:25AM, 1 October 2026

TLP Rating: Clear

Cyber risks of Democratic People's Republic of Korea IT workers to New Zealand organisations

This advisory outlines common practices used by Democratic People's Republic of Korea (DPRK) Information Technology (IT) workers attempting to gain employment from New Zealand organisations, as well as associated red flags, and ways to protect against this activity.

New Zealand organisations are encouraged to review this advisory to better understand and prevent the inadvertent hiring of DPRK IT Workers.

This advisory is being released by the following authoring and co-sealing agencies:

New Zealand National Cyber Security Centre (NCSC)
New Zealand Police

If you suspect this type of activity, please report it to New Zealand Police or the NCSC as soon as possible.

Read the joint agency advisory [PDF, 595 KB]

Report to Police External Link

Report a cyber security issue