Ledger / Apr 2025
Unit 42: North Korean IT workers use real-time deepfakes in interviews
Strong
Unit 42 presents evidence and a demonstration, not a confirmed named case.
Palo Alto Networks reports evidence that DPRK IT workers use real-time deepfakes to infiltrate organisations.
“Evidence suggests that North Korean IT workers are using real-time deepfake technology to infiltrate organizations through remote work positions”Palo Alto Networks Unit 42
Sources
- North Korean synthetic identity creationPalo Alto Networks Unit 42 · 21 Apr 2025 · primary source
- North Korean IT workers seen using AI tools to scam firms into hiring themThe Record · 10 Apr 2025 · secondary source
- Date
- Apr 2025
- Disclosed
- 21 Apr 2025
- Actor
- North Korean IT workers (Wagemole) (nation state), as attributed by Palo Alto Networks Unit 42
- Nexus
- North Korea
- Targets
- Employers hiring remote staff
- What the AI did
- Deepfake, Social engineering, Fraud
- Model
- unspecified real-time face-swap tool
- Model family
- Deepfake / voice
- Model basis
- stated by researcher
- Autonomy
- assist
- Outcome
- Research finding; no single loss stated.