"Earned 10 Billion Won"… The Chilling Truth Behind Employees Who Regularly Collected Salaries at Major Corporations

North Korean Operatives Use AI for Fake Employment at Major European Corporations

Previously Infiltrated 300 U.S. Companies, Earning Over 1 Billion KRW

There have been reports that North Korean information technology (IT) operatives are using artificial intelligence (AI) to disguise themselves and gain employment at major European companies, collecting wages in the process. It has been revealed that they utilize deepfake videos and fake identity information.

Image to assist article understanding. Pexels

On March 15 (local time), the Financial Times (FT) reported that North Korean IT operatives are creating fake identities and applying for remote work positions at large European companies. After being hired, they collect salaries, thereby earning foreign currency.

Cybersecurity experts explained that this phenomenon of "fake employees" is one of the strategies systematically operated by the North Korean regime to secure foreign currency.

Undercover Employment at 300 Companies... Earning Foreign Currency Worth Over 10 Billion Won

According to the U.S. Department of Justice, between 2020 and 2024, North Korean agents disguised as remote workers infiltrated more than 300 American companies and earned at least 6.8 million dollars (approximately 10 billion won).

Security experts said that this phenomenon is now spreading to Europe as well. Some North Korean agents are known to operate so-called "laptop farms" in the United Kingdom, setting up remote work environments and accessing the systems of multiple companies.

These operatives typically steal or forge other people's identities. They hack into dormant LinkedIn accounts or pay account owners for access. Afterwards, they prepare fake resumes and identification documents, and accomplices write reference letters for each other to boost their credibility.

Using Deepfakes and Digital Avatars... Leveraging AI to Get Hired

In particular, there have been cases where AI technology is used to create deepfake videos or digital avatars to participate in video interviews, allowing them to pass corporate hiring procedures.

Alex Laurie, Chief Technology Officer at cybersecurity firm Ping Identity, explained, "By using large language models, it is possible to generate natural-sounding names and email formats, eliminating linguistic and cultural awkwardness."

As companies become more cautious about AI-powered interviews and strengthen their hiring processes, it is reported that North Korean operatives have even hired real people to participate in interviews on their behalf.

After being hired, when companies provide new employees with work laptops, these are intercepted and used remotely for work. In some cases, the operatives were employed at multiple companies simultaneously and received salaries from each.

Previously, Amazon's Chief Security Officer Stephen Schmidt stated in a LinkedIn post that, since April 2024, the company has blocked more than 1,800 hiring attempts by individuals suspected of being North Korean operatives. He noted that these individuals are particularly targeting roles related to AI and machine learning, adding, "This is not just an Amazon problem, but is likely occurring on a large scale across the industry."

This content was produced with the assistance of AI translation services.