From Fake Workers to Account Recovery: The Growing Identity Verification Risk

The report warns that attackers increasingly exploit identity lifecycle events—onboarding and account recovery—using social engineering, falsified documents, and deepfakes rather than stealing credentials. It cites North Korean remote worker impersonation campaigns and groups like Scattered Spider, links these tactics to a high-impact ransomware breach, and recommends applying high-assurance identity verification (government ID checks plus biometric liveness) for high-risk service-desk and onboarding actions; the piece is also sponsored content promoting Specops Verified ID.