logo

North Korean IT workers seen using AI tools to scam firms into hiring them

ID: 07e6e1c8-fe81-5b7d-8ec4-cad61a0211f7

STIX ID: report--07e6e1c8-fe81-5b7d-8ec4-cad61a0211f7

Feed Name: The Record from Recorded Future News

Threat Score
70/100

Date Published: 2025-04-24

Date Updated: 2026-05-01

...
...

Okta and other security firms report that North Korean-linked workers and facilitators are leveraging generative AI and automation—from automated resume testing and application-filling to real-time translation, interview coaching, and deepfake video—to create multiple personas, pass interviews, and hold remote IT roles at U.S. and European companies. The activity is being used to generate revenue for the DPRK (potentially hundreds of millions of dollars), with some individuals tied by indictments to the DPRK Munitions Industry Department; companies and vendors are adapting hiring and identity-verification processes in response.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.