logo

Recruitment red flags: Can you spot a spy posing as a job seeker?

ID: 4aa3e902-b313-53ce-80f9-ef67221c5682

STIX ID: report--4aa3e902-b313-53ce-80f9-ef67221c5682

Feed Name: WeLiveSecurity (ESET Research)

Threat Score
85/100

Date Published: 2025-10-28

Date Updated: 2026-05-01

...
...

This report describes a persistent campaign where North Korean-affiliated actors create or steal identities, use deepfakes and facilitator networks to gain remote employment at Western companies, and then leverage issued laptops, RMM/VPNs and privileged access to exfiltrate data or conduct fraud; the piece cites Microsoft, KnowBe4, ESET and law enforcement findings, summarizes tactics and scale (hundreds of victimized companies), and provides hiring-screening and monitoring guidance to mitigate the threat.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.