生成中...【新闻麻辣烫】
朝鲜IT特工海外"打工记"曝光！化名"金秀"的脱北者向BBC大爆料：他们用数百张假身份在欧美远程接单，月入至少5000美元，85%工资上缴祖国。最魔幻的是，这些程序员在Slack上装老外，专挑英国公民"借身份"——"随便聊几句英国人就把身份信息交出来了"。美国网络安全公司老板吐槽面试经历："让应聘者证明当地是白天，结果视频里永远漆黑一片"。波兰老板更绝，直接抓到应聘者用AI换脸软件伪装！（OS：建议各大招聘平台新增"验时区"功能，毕竟朝鲜程序员再厉害，也没法把平壤的夜晚变成纽约的白天啊！）
---
**North Korea sent me abroad to be a secret IT worker. My wages funded the regime**
**朝鲜派我海外秘密从事IT工作 工资上缴政权**
Jin-su says over the years he used hundreds of fake IDs to apply for remote IT work with Western companies.
化名金秀的男子称，多年来使用数百张假身份申请西方公司远程IT工作。
---
**It was part of a vast undercover scheme to raise funds for North Korea.**
**这属于朝鲜大规模秘密筹款计划的一部分**
Juggling multiple jobs across the US and Europe would make him at least $5,000 (£3,750) a month, he told the BBC in a rare interview.
他在罕见采访中告诉BBC，同时接欧美多份工作月入至少5000美元。
---
**Some colleagues, he said, would earn much more.**
**称部分同事收入更高**
Before he defected, Jin-su - whose name has been changed to protect his identity - was one of thousands believed to have been sent abroad to China and Russia, or countries in Africa and elsewhere, to take part in the shadowy operation run by secretive North Korea.
化名金秀的他在脱北前，是被派往中俄及非洲等国参与秘密行动的数千人之一。
---
**North Korean IT workers are closely monitored and few have spoken to the media, but Jin-su has provided extensive testimony to the BBC, giving a revealing insight into what daily life is like for those working the scam, and how they operate.**
**朝鲜IT工作者受严密监控鲜少发声 金秀向BBC详述骗局操作内幕**
His first-hand account confirms much of what has been estimated in UN and cyber security reports.
他的证词印证了联合国和网络安全报告中的许多推测。
---
**He said 85% of what he earned was sent back to fund the regime.**
**称85%收入上缴政权**
Cash-strapped North Korea has been under international sanctions for years.
资金短缺的朝鲜多年来受国际制裁。
---
**"We know it's like robbery, but we just accept it as our fate," Jin-su said,"it's still much better than when we were in North Korea."**
**"明知像抢劫但认命 仍比在朝鲜好"**
Secret IT workers generate $250m-$600m annually for North Korea, according to a UN Security Council report published in March 2024.
据2024年3月联合国安理会报告，秘密IT工作者每年为朝鲜创收2.5-6亿美元。
---
**The scheme boomed in the pandemic, when remote working became commonplace, and has been on the rise ever since, authorities and cyber defenders warn.**
**疫情远程办公普及后该计划激增**
Most workers are after a steady paycheck to send back to the regime, but in some cases, they have stolen data or hacked their employers and demanded ransom.
多数工作者只为稳定收入，但也存在窃取数据或勒索雇主案例。
---
**Last year, a US court indicted 14 North Koreans who allegedly earned $88m by working in disguise and extorting US firms over a six-year period.**
**去年美法院起诉14名六年敛财8800万美元的朝鲜人**
Four more North Koreans who allegedly used fraudulent identities to secure remote IT work for a cryptocurrency firm in the US were indicted last month.
上月另有4名朝鲜人被控用假身份为美国加密货币公司远程工作。
---
**Getting the jobs**
**求职手段**
Jin-su was an IT worker for the regime in China for several years before defecting.
金秀叛逃前在华从事IT工作数年。
---
**He and his colleagues would mostly work in teams of 10, he told the BBC.**
**称通常10人团队作业**
Access to the internet is limited in North Korea, but abroad, these IT workers can operate more easily.
朝鲜国内网络受限，但海外IT工作者操作更便利。
---
**They need to disguise their nationality not just because they can get paid more by impersonating Westerners, but due to the extensive international sanctions North Korea is under, primarily in response to its nuclear weapons and ballistic missile programmes.**
**伪装国籍既为高薪也因国际制裁**
This scheme is separate from North Korea's hacking operations which also raise money for the regime.
该计划与朝鲜黑客行动分开运作。
---
**Earlier this year the Lazarus Group - an infamous hacking group understood to be working for North Korea, though they've never admitted to it - is thought to have stolen $1.5bn (£1.1bn) from cryptocurrency firm Bybit.**
**拉撒路黑客集团被指今年盗取Bybit15亿美元**
The BBC spoke to Jin-su on a video call from London. For his safety we are protecting his identity.
BBC通过伦敦视频连线采访金秀，为安全隐去其身份。
---
**Jin-su spent most of his time trying to secure fraudulent identities which he could use to apply for jobs.**
**金秀多数时间用于获取假身份求职**
He would first pose as Chinese, and contact people in Hungary, Turkey and other countries to ask them to use their identity in exchange for a percentage of his earnings, he told the BBC.
他先冒充中国人联系匈、土等国人士，用分成换取身份信息。
---
**"If you put an 'Asian face' on that profile, you'll never get a job."**
**"资料用亚洲面孔永远找不到工作"**
He would then use those borrowed identities to approach people in Western Europe for their identities, which he'd use to apply for jobs in the US and Europe.
再用这些身份接触西欧人士获取更高级别假身份。
---
**Jin-su often found success targeting UK citizens."With a little bit of chat, people in the UK passed on their identities so easily," he said.**
**英国公民最易上当"聊几句就交出身份"**
IT workers who speak better English sometimes handle the applications process.
英语较好者负责申请流程。
---
**But jobs on freelancer sites also don't necessarily require face-to-face interviews, and often day-to-day interactions take place on platforms like Slack, making it easier to pretend to be someone you are not.**
**自由职业平台无需面试 Slack沟通更易伪装**
Jin-su told the BBC he mostly targeted the US market,"because the salaries are higher in American companies".
金秀称主攻美国市场"因薪资更高"。
---
**He claimed so many IT workers were finding jobs, often companies would unwittingly hire more than one North Korean."It happens a lot," he said.**
**称多家公司无意中雇佣多名朝鲜人**
It's understood that IT workers collect their earnings through networks of facilitators based in the West and China.
据悉收入通过中西方中介网络收取。
---
**Last week a US woman was sentenced to more than eight years in prison for crimes connected to assisting North Korean IT workers find jobs and sending them money.**
**上周一美国女子因协助朝鲜IT工作者获刑8年**
The BBC cannot independently verify the specifics of Jin-su's testimony, but through PSCORE, an organisation which advocates for North Korean human rights, we've read testimony from another IT worker who defected that supports Jin-su's claims.
BBC无法独立核实金秀证词细节，但通过脱北者组织PSCORE获得另一IT工作者相似证词。
---
**The BBC also spoke to a different defector, Hyun-Seung Lee, who met North Koreans working in IT while he was travelling as a businessman for the regime in China. He confirmed they'd had similar experiences.**
**另一脱北者李贤承证实类似经历**
A growing problem
日益严重的问题
The BBC spoke to multiple hiring managers in the cyber security and software development sector who say they've spotted dozens of candidates they suspect are North Korean IT workers during their hiring processes.
BBC采访多位网络安全和软件开发领域招聘经理，均称在招聘过程中发现数十名疑似朝鲜IT工作者。
---
**Rob Henley, co-founder of Ally Security in the US, was recently hiring for a series of remote vacancies at his firm, and believes he interviewed up to 30 North Korean IT workers in the process.**
**美国Ally Security联合创始人称面试约30名朝鲜IT工作者**
"Initially it was like a game to some extent, like trying to figure out who was real and who was fake, but it got pretty annoying pretty quickly," he said.
"起初像猜谜游戏，很快变得令人厌烦"。
---
**Eventually, he resorted to asking candidates on video calls to show him it was daytime where they were.**
**最终要求视频面试者证明当地是白天**
"We were only hiring candidates from the US for these positions. It should have been at least light outside. But I never saw daylight."
"只招聘美国候选人，窗外应有日光，但我从未见过"。
---
**Back in March, Dawid Moczadło, co-founder of Vidoc Security Lab based in Poland, shared a video of a remote job interview he conducted where the candidate appeared to be using artificial intelligence software to disguise their face.**
**波兰Vidoc公司联合创始人3月分享应聘者用AI换脸视频**
He said that after speaking to experts, he believed the candidate could be a North Korean IT worker.
与专家讨论后认为可能是朝鲜IT工作者。
---
**Get Real Security - a digital forensics company - told us it's highly likely the candidate (left) is using some kind of faceswapping or AI filter**
**数字取证公司称应聘者很可能使用AI换脸滤镜**
We contacted the North Korean embassy in London to put the allegations in this story to them. They did not respond.
BBC联系朝鲜驻伦敦使馆未获回应。
---
**A rare escape route**
**罕见的脱逃之路**
