The North Korean on your payroll

The report details a DPRK-linked actor called "JJ" that constructs artificial professional personas—using free webmail and accounts on job boards, scheduling platforms, document workspaces, coding sites, and dynamic DNS—to apply for roles (notably in AI and healthcare). OSINT shows these accounts are exclusively used for applications and lack personal footprints; PDF résumé metadata and service-selection patterns are highlighted as common forensic "tells" that help detect such fabricated personas.