KnowBe4 Unknowingly Hired Fake North Korean IT Worker

A North Korean operative, using a stolen identity and an AI-generated photo, passed interviews and background checks to be hired remotely at KnowBe4 and attempted to load malware onto a corporate Mac; EDR detected the activity, the device was contained, and the FBI and Mandiant were notified. The report places this incident within a larger, state-sponsored North Korean campaign that places fake IT workers in businesses worldwide to steal data and money, notes DOJ and interagency actions seizing domains and funds, and recommends stronger vetting, device checks, and continuous monitoring to mitigate similar infiltrations.