Scope, Scale of Spurious North Korean IT Workers Emerges

Microsoft and U.S. law enforcement have identified and disrupted a North Korean state-linked employment fraud campaign (Jasper Sleet / Storm-0287) that leverages AI-generated identities, voice modification, VPNs, and stolen résumés to place fake IT workers at global organizations; the operation has resulted in access to sensitive data, sanction-evasion payments (roughly $3M reported), and ongoing concern that AI will make detection harder, prompting calls for stronger identity verification and cross-organizational defenses.