Synthetic Identities: A Dual Threat to Enterprises

Synthetic identities amplified by generative AI and deepfake injection pose a growing enterprise threat: adversaries can create convincing fake personas to commit large-scale financial fraud, evade sanctions, and perform state-sponsored infiltration. The report highlights North Korea's "PurpleDelta" remote-hiring scheme—linked to at least 64 US companies—using fabricated profiles, deepfake injection, and laptop farms to gain access to networks and siphon IP and funds, and recommends moving to continuous zero-trust identity models, AI-driven detection, and tightened remote-hiring controls.