North Korean IT Workers Use Deepfakes to Evade Hiring Checks, Warns Eleven-Nation Advisory
A coordinated alert from eleven allied nations, including the United States, Japan, and several European countries, warns that North Korean IT operatives are using real-time AI deepfake technology to impersonate real people during live job interviews. This tactic allows them to bypass identity checks that hiring teams rely on. The operatives, working under the group known as FAMOUS CHOLLIMA, use AI-generated resumes and deepfake video identities to secure remote IT positions. Once hired, they exploit their access to steal source code and credentials, funneling approximately $800 million to North Korea's nuclear and missile programs in 2024. The advisory highlights the use of IP-KVM devices and remote administration tools to maintain control over company-issued laptops, allowing operatives to appear as US-based employees while operating from abroad. 
