Cylake: Pioneering AI-Native Cybersecurity for Data Sovereignty

How North Korean APTs Are Using AI to Enhance IT Worker Scams

Update How North Korean APTs Are Leveraging AI for Scams North Korean advanced persistent threat (APT) groups, specifically "Jasper Sleet" and "Coral Sleet," are entrenching their tactics by harnessing artificial intelligence (AI) in IT worker scams. Traditional scams are getting a tech-savvy overhaul, thanks to AI tools that help create convincing fictitious identities and defraud unsuspecting companies. The Art of Deception: Creating Fake Identities Much of the success of these scams hinges on the ability of North Korean operatives to fabricate identities convincingly. They employ AI technology to generate culturally appropriate names and email addresses, and even to craft personalized résumés and cover letters that match the job descriptions listed on platforms like Upwork. By using natural language processing models, these groups can extract key phrases and requirements from job postings, thus enhancing their applications. From Applications to Job Performance: AI Takes Over The deceit does not end with securing a job. Once hired, these fake IT workers continue to utilize AI to maintain their façade. They use sophisticated voice-changing software to mask their accents during interviews and everyday communications, creating a seamless experience that minimizes suspicion. AI tools also facilitate document translation and coding tasks, allowing them to complete their job requirements without raising red flags. This dual strategy of deception—both in presenting fake personas and in executing job functions—ensures the longevity of their scams. Signals for Companies: What to Watch For As awareness of these scams grows, companies are encouraged to implement stricter vetting processes. This includes conducting video calls that can help identify deepfake technology, characterized by pixelation at the edges of facial features. Experts recommend asking culturally relevant questions in interviews, as North Korean operatives may struggle with local knowledge. Future of AI in CyberScams There remains a critical need for awareness among hiring teams. While some companies have reported a decrease in these scams, improved techniques suggest that the scalability of such operations is still a significant concern. Increased vigilance is essential to counter these evolving tactics, as North Korea continues to adapt its use of AI. Conclusion: Staying One Step Ahead Organizations must remain adaptive in their hiring processes to combat these sophisticated scams effectively. The integration of AI into fraudulent activities by state-backed actors marks a significant shift, necessitating ongoing education and adjustment across the hiring landscape. Companies should take preventative measures seriously to safeguard against these elaborate scams.