Amazon has blocked around 1,800 job applications after identifying links to suspected North Korean operatives attempting to infiltrate the company through remote IT roles, according to BBC News.
The company’s chief security officer said the applicants were using stolen or fabricated identities in an effort to secure remote-working technology positions. The suspected scheme forms part of a broader strategy allegedly used by North Korean-linked actors to earn foreign currency and gain access to sensitive systems by embedding operatives within global technology firms.
Amazon detected irregular patterns during its recruitment and vetting processes, including inconsistencies in identity documentation and application behavior that raised red flags. Once identified, the applications were halted before any hiring decisions were made, preventing potential security breaches.
The incident highlights growing concerns among multinational companies over state-linked cyber and financial operations targeting remote work opportunities. Since the global expansion of remote employment, technology firms have become increasingly vulnerable to identity fraud, insider threats, and covert cyber activity.
US authorities have previously warned that North Korean operatives have posed as freelance developers or remote employees to bypass sanctions, generate revenue for the regime, and potentially access corporate networks. Amazon’s actions align with wider efforts across the tech industry to strengthen identity verification, background checks, and cybersecurity controls in recruitment.
The company said it continues to invest heavily in internal security systems and collaborates with law enforcement and intelligence agencies to detect and disrupt such activities. The case underscores how hiring processes have become a frontline in corporate security as geopolitical tensions increasingly spill into the digital workforce.
Amazon bets big on Egypt as inflation reshapes online shopping
