Microsoft Warns North Korean Agents Use AI to Land Western IT Jobs
North Korean groups use AI-generated personas to secure remote IT roles at global firms, enabling espionage and data theft through long-term access, Microsoft reports.
- Microsoft Threat Intelligence said Friday that North Korean groups Coral Sleet, Sapphire Sleet and Jasper Sleet use AI to accelerate hiring of remote technical workers at global companies.
- To gain footholds, the groups frequently use financial incentives and interview-themed lures to obtain initial access, seeking long-term trusted roles inside victim organizations to steal sensitive data.
- Jasper Sleet leverages generative AI to research Upwork postings, tailor fake personas, use Faceswap and AI-generated photos, and apply voice modulation to pass interviews while prompting AI for job performance.
- Microsoft has identified and disrupted thousands of accounts tied to fraudulent IT worker activity and introduced the Security Dashboard for AI to unify AI security across Microsoft Defender, Microsoft Entra, and Microsoft Purview.
- Researchers warned that a shift toward agentic AI could enable semi-autonomous workflows, while Microsoft Threat Intelligence researchers say experiments show potential for more advanced activity despite current limits.
8 Articles
8 Articles
North Korea is exploiting AI technology to swindle IT companies into hiring fake employees. It has been revealed that North Korea is using artificial intelligence (AI) to conduct job scams targeting remote IT recruitment systems to earn foreign currency. They use AI to create fake names and profile pictures, superimpose faces onto stolen IDs, and use them to conduct remote development for American and European companies...
Microsoft warns North Korean threat groups are scaling up fake worker schemes with generative AI
North Korean threat groups are using artificial intelligence tools to accelerate and expand the country’s long-running scheme to get remote technical workers hired at global companies for longer durations, Microsoft Threat Intelligence said in a report Friday. AI services are empowering North Korean operatives across the attack lifecycle. Attackers have turned AI into a “force multiplier” that bolsters and automates their efforts to conduct res…
Coverage Details
Bias Distribution
- 40% of the sources are Center, 40% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium






