North Korean IT Worker Allegedly Used Stolen Identity and AI Resume in Job Application Scam

A suspected North Korean operative attempted to gain a remote Lead AI Architect role at a U.S. cybersecurity firm using a stolen Florida identity, AI-generated resume content mirroring the job posting, VoIP phone masking, and Astrill VPN endpoints; investigators uncovered multiple fabricated profiles, redirected laptop shipping consistent with laptop farms controlled via PiKVM and Tailscale, and recommended enhanced pre-employment OSINT, verification of IPs/phones, live screen-sharing of work, and use of specialist firms for detection.