A U.S. company, Nisos, has uncovered a network of at least 20 North Korean operatives, including Jo, who applied for multiple jobs and led a team of cybersecurity investigators to the inner workings of a vast North Korean employment scheme with national security implications. The company had no intention of hiring Jo, but had begun to suspect that he was not exactly who he claimed to be. The investigation revealed that North Korea has been using remote workers at U.K. companies to evade sanctions and fund its illicit programs, including weapons of mass destruction and ballistic missile efforts. The findings provided an unprecedented look at the human dynamics and inner workings behind an international employment scheme estimated to include hundreds of American companies, thousands of people, and hundreds of millions of dollars per year. NISos shared its open-source intelligence analysis, videos with Jo and technical findings. It also worked with law enforcement to notify the individual whose identity was stolen.