New research from cybersecurity firm Okta has revealed that North Korean hackers are employing generative artificial intelligence (GenAI) technology to secure and maintain remote employment in western companies, particularly in sectors with sensitive security data such as defence, aerospace, and engineering. This development marks an escalation in an ongoing campaign where hackers seek to infiltrate firms through fake job applications and interviews.
According to Okta’s findings, the Democratic People’s Republic of Korea (DPRK) actors are leveraging AI to create convincing personas at various stages of the job application and interview process. This includes generating comprehensive CVs and cover letters crafted by AI models, conducting mock interviews via chat and webcam, and handling communications through translation and summarisation tools. The use of GenAI enables these hackers to juggle multiple remote job roles simultaneously, thereby generating significant revenue for the DPRK state.
The campaign is supported by a network of facilitators within North Korea who provide critical in-country assistance. These facilitators supply technical infrastructure, legitimate business covers, domestic addresses, and authentic documentation to help the hackers present credible profiles throughout recruitment and hiring processes.
In a further development of their tactics, North Korean hackers are also reversing their approach by using fake interviews to target job seekers. In such scenarios, malware and information-stealing software are deployed through the interview process. The attacks often start on established professional platforms such as LinkedIn and Upwork, where the attackers initiate contact to discuss supposed job opportunities.
The growing sophistication of these schemes highlights the complex and multi-faceted nature of the threat, demonstrating how AI technologies are being weaponised in cyber-espionage efforts connected to employment fraud.
The Tech Radar report advises vigilance among job seekers and employers alike, urging scrutiny of communications during hiring processes and caution before downloading any unfamiliar software. The evolving use of AI in such campaigns represents a significant shift in cyberattack methods targeting critical industries in the West.
Source: Noah Wire Services