-
<US Justice Department> 2025-1-23, Two North Korean Nationals and Three Facilitators Indicted for Multi-Year Fraudulent Remote Information Technology Worker Scheme that Generated Revenue for the Democratic People’s Republic of Korea (IT Worker)
<US Justice Department> 2024-12-12, Fourteen North Korean Nationals Indicted for Carrying Out Multi-Year Fraudulent Information Technology Worker Scheme and Related Extortions (IT Worker)
<UK, Office of Financial Sanctions Implementation> 2024-9-12, Advisory on North Korean IT Workers.
<38 North> 2024-8-21, North Korea’s International Network for Artificial Intelligence Research.
<US Justice Department> 2024-8-8, Justice Department Disrupts North Korean Remote IT Worker Fraud Schemes Through Charges and Arrest of Nashville Facilitator (IT Worker)
<KnowBe4 (cyber security company)> 2024-06-23, How a North Korean Fake IT Worker Tried to Infiltrate Us.
-
<U.S. Departments of State and Treasury, and the Federal Bureau of Investigation> 2022-5-16, GUIDANCE ON THE DEMOCRATIC PEOPLE’S REPUBLIC OF KOREA INFORMATION TECHNOLOGY WORKERS.
-
<UN Security Council Arri-formula> 2025-1-14, Security Council Arria-formula on "Commercial Spyware and the Maintenance of International Peace and Security".
Use of AI by DPRK
DPRK IT workers may use AI-generated fake ID during job interviews. A report by cyber security company also indicate their use of real-time deepfake technology. The most effective detection method is passing a hand over the face, which disrupts facial landmark tracking. Other recommended techniques include:
Rapid head movements
Exaggerated facial expressions
Sudden lighting changes
Companies are advised to adopt layered detection strategies in coordination with their information security teams. Below is an example of DPRK tactics.
Source: KnowBe4.
“The picture (right) is an AI-enhanced version of the person who we interviewed during the hiring process, where the applicant’s face was added over a completely different unrelated person’s “stock photography” picture (left) so they looked more professional with glasses and wearing formal work attire.”
Source: KnowBe4, “North Korean Fake Employees Are Everywhere! How to Protect Your Organization” (Annotated by DPRK Monitor)