State Department Names North Korean APT Group WageMole in IT Worker Fraud Pipeline

On August 6, 2026, the U.S. State Department, with international partners, publicly named WageMole — a North Korean state-sponsored advanced persistent threat group — as a key actor in the IT worker fraud pipeline. The group uses social engineering and technical methods to place North Koreans in remote U.S. jobs, generating hundreds of millions for Pyongyang.