Threats Tagged 'remote work deception'

The PurpleDelta threat group, composed of North Korean IT workers, has conducted a large-scale fraudulent employment campaign targeting over 1,100 companies primarily in software, technology, staffing, consulting, and healthcare sectors between late 2024 and early 2025. They used at least 22 AI-generated fake personas with fabricated identity documents and employed sophisticated tradecraft such as multi-account browsers, AI-assisted interview responses, and detailed tracking. After gaining employment at multiple organizations, they acted as insider threats by recording meetings, using personal devices and bank accounts, and coordinating via encrypted messaging platforms. This campaign represents a significant insider threat leveraging remote work deception and AI abuse to infiltrate organizations.