AI security startup CEO posts a job. Deepfake candidate applies, inner turmoil ensues.

The report details a wave of deepfake-enabled recruitment scams—attributed to DPRK-affiliated actors—where fake profiles and AI-generated interview videos are used to infiltrate companies, obtain insider access, steal sensitive data or extort employers; it recounts an incident experienced by Expel's CEO, highlights indicators of deepfakes and social-engineering tactics, and recommends low- and high-tech mitigations such as requiring cameras on, forcing virtual-background removal, on-site work periods, and trusting gut instincts.