What happened

Thousands of North Korean IT workers, often operating from South-east Asia or China, have infiltrated U.S. and European tech firms by using generative AI to create convincing resumes, cover letters, and even deepfake video personas for interviews. 

AI-powered tools help them manage multiple fake identities, automate job applications, and maintain several jobs simultaneously. 

These workers, sometimes aided by Western facilitators, have been hired by Fortune 500 companies and smaller firms alike, despite increasingly rigorous vetting processes. 

The income generated—estimated in the hundreds of millions of dollars—directly supports North Korea’s sanctioned weapons and missile programmes. 

Why it happened

The surge in remote work post-pandemic, combined with a shortage of information security talent in Western countries, created an opportunity for North Korean operatives to exploit hiring systems.

Generative AI technologies enable even minimally skilled, non-native English speakers to convincingly pass through automated and human screening processes.

The North Korean government has organized these operations through agencies like the Reconnaissance General Bureau and the Munitions Industry Department, using sophisticated methods and AI to scale their efforts rapidly.