AI Incident Database: Ongoing Purported AI-Assisted Identity Fraud Enables Unauthorized Access to Western Companies by North Korean IT Workers
North Korean operatives have reportedly used AI-generated identities to secure remote jobs or impersonate employers in order to infiltrate companies. These tactics allegedly support sanctions evasion through wage theft, credential exfiltration, and malware deployment. Workers reportedly use fake resumes, VPNs, and face-altering tools; some deploy malware like OtterCookie after embedding, while others lure targets via spoofed job interviews. AI systems are reportedly used to …
AI Incident Database · Incident 1118Operator lens (medium): inspect D1 (input boundary), D2 (output validation), D7 (tool permissions).
Event summary
North Korean operatives have reportedly used AI-generated identities to secure remote jobs or impersonate employers in order to infiltrate companies. These tactics allegedly support sanctions evasion through wage theft, credential exfiltration, and malware deployment. Workers reportedly use fake resumes, VPNs, and face-altering tools; some deploy malware like OtterCookie after embedding, while others lure targets via spoofed job interviews. AI systems are reportedly used to …
Linked entities
- OpenAI
vendor | 70%
- deepfake-technology-developers
organisation | 70%
- large-language-model-developers
organisation | 70%
- yang-di
organisation | 70%
- waterplum
organisation | 70%
- wagemole
organisation | 70%
- void-dokkaebi
organisation | 70%
- unc5267
organisation | 70%
- son-un-chol
organisation | 70%
- sok-kwang-hyok
organisation | 70%
- sim-hyon-sop
organisation | 70%
- rim-un-chol
organisation | 70%
- ri-kyong-sik
organisation | 70%
- reconnaissance-general-bureau
organisation | 70%
- purplebravo
organisation | 70%
- north-korean-threat-actors
organisation | 70%
- minh-phuong-ngoc-vong
organisation | 70%
- matthew-isaac-knoot
organisation | 70%
- lazarus-group
organisation | 70%
- ko-chung-sok
organisation | 70%
- kim-ye-won
organisation | 70%
- kim-sang-man
organisation | 70%
- kim-ryu-song
organisation | 70%
- kim-mu-rim
organisation | 70%
- jong-song-hwa
organisation | 70%
- jong-kyong-chol
organisation | 70%
- jang-chol-myong
organisation | 70%
- hyon-chol-song
organisation | 70%
- gwisin-gang
organisation | 70%
- government-of-north-korea
organisation | 70%
- famous-chollima
organisation | 70%
- department-53
organisation | 70%
- contagious-interview
organisation | 70%
- christina-chapman
organisation | 70%
- choe-jong-yong
organisation | 70%
- cho-chung-pom
organisation | 70%
- western-companies
organisation | 70%
- web3
organisation | 70%
- ssa
organisation | 70%
- social-security-administration
organisation | 70%
- recruitment-teams
organisation | 70%
- oleksandr-didenko
organisation | 70%
- national-security-and-intelligence-stakeholders
organisation | 70%
- macos-users
organisation | 70%
- jiho-han
organisation | 70%
- irs
organisation | 70%
- interviewees
organisation | 70%
- internal-revenue-service
organisation | 70%
- human-resources-staff
organisation | 70%
- hiring-managers
organisation | 70%
- haoran-xu
organisation | 70%
- epistemic-integrity
organisation | 70%
- employers
organisation | 70%
- developers
organisation | 70%
- cryptocurrency-platforms
organisation | 70%
- companies-in-the-united-states
organisation | 70%
- chunji-jin
organisation | 70%
- blockchain-projects
organisation | 70%
- andrew-m.
organisation | 70%
Related graph edges
| Edge | Type | Confidence |
|---|---|---|
| ent-vendor-openai to ent-psf-d1 | maps to | 60% |
| ent-vendor-openai to ent-psf-d1 | maps to | 60% |
| ent-vendor-openai to ent-psf-d1 | maps to | 60% |
| ent-vendor-openai to ent-psf-d2 | maps to | 60% |
| ent-vendor-openai to ent-psf-d2 | maps to | 60% |
| ent-vendor-openai to ent-psf-d2 | maps to | 60% |
| ent-vendor-openai to ent-psf-d6 | maps to | 60% |
| ent-vendor-openai to ent-psf-d6 | maps to | 60% |
| ent-vendor-openai to ent-psf-d6 | maps to | 60% |
| ent-aiid-deepfake-technology-developers to ent-psf-d2 | maps to | 60% |
| ent-aiid-deepfake-technology-developers to ent-psf-d2 | maps to | 60% |
| ent-aiid-deepfake-technology-developers to ent-psf-d2 | maps to | 60% |