North Korean Operatives Use AI to Infiltrate Remote Jobs
A large-scale employment fraud campaign is using AI-generated identities, stolen personal information and automated tools to place North Korean-linked workers inside companies around the world.
North Korean-linked operatives are increasingly using artificial intelligence to secure remote technology jobs, according to cybersecurity researchers. A group tracked by Recorded Future as PurpleDelta has reportedly submitted applications to more than 1,100 companies, using at least 22 fabricated personas. The campaign targeted technology companies as well as businesses in finance, healthcare and other sectors.
The operation demonstrates how AI is making employment fraud more sophisticated. Researchers say the fake applicants used AI-generated profile photographs, customized AI assistants and fraudulent identity documents to appear legitimate. Some operators reportedly used AI-generated responses and real-time transcription during interviews, allowing them to present themselves as qualified candidates despite concealing their true identities and locations.
The scale of the activity is particularly concerning. Separate research by Nisos identified a DPRK-linked cell that submitted at least 166,893 job applications and participated in more than 21,645 interviews, ultimately receiving at least 76 job offers. The findings show that these operations can function at industrial scale rather than relying on a small number of isolated fraudulent applications.
Once fraudulent workers gain employment, the threat can extend beyond hiring fraud. Security researchers warn that insiders may gain access to company systems, proprietary information, source code and internal communications. In some cases, remote workers have also been connected to networks of U.S.-based facilitators and devices that help conceal their actual locations.
The development highlights a growing challenge for companies as remote employment and AI become more widespread. Traditional interviews and résumé checks may no longer be sufficient on their own, making identity verification and security controls increasingly important for sensitive technical positions. The broader lesson is that AI can strengthen legitimate hiring and productivity while simultaneously making sophisticated employment fraud easier to scale, forcing organizations to rethink how they verify the people receiving access their system.
