Report reveals tactics used to obtain work at major companies on false pretenses, including using AI to ace interviews

A North Korean cell of remote workers operated a highly organized employment network that submitted nearly 170,000 job applications and fraudulently secured dozens of positions at U.S. companies, according to a new investigation.
In a report published Tuesday, Nisos — a cyber intelligence firm that specializes in “human risk management” — outlined the operations of a North Korean information technology (IT) worker cell it had infiltrated and tracked since mid-2025.
While the cell’s operations largely showcased tactics and tools seen in previously documented DPRK IT worker campaigns, Nisos’ investigation offered one of the most detailed looks
© Korea Risk Group. All rights reserved.
No part of this content may be reproduced, distributed, or used for
commercial purposes without prior written permission from Korea Risk
Group.