Security Firm Accidentally Hires North Korean Hacker, Did Not KnowBe4

KnowBe4 hired an individual later identified as a North Korean threat actor using a stolen/AI-enhanced identity who began loading malware onto a company-issued Mac immediately after receipt; the SOC detected the activity, quarantined the device, and prevented any data loss. The company shared artifacts with Mandiant and the FBI, reported no breach or exfiltration, and implemented hiring and shipping process changes and additional vetting recommendations to mitigate similar risks.