Ledger / 15 Jul 2024
KnowBe4 hires North Korean IT worker using AI-enhanced photo
Confirmed
KnowBe4's CEO post says the application photo was AI-enhanced from stock imagery (per search summary of the page; the exact sentence was not located in the fetched text).
KnowBe4 hired a remote engineer using a stolen valid US identity and an AI-altered photo after four video interviews. Company, Mandiant and FBI attributed it to a North Korean operation.
“How a North Korean Fake IT Worker Tried to Infiltrate Us”KnowBe4
Sources
- How a North Korean Fake IT Worker Tried to Infiltrate UsKnowBe4 · 23 Jul 2024 · primary source
- Cyber firm KnowBe4 hired a fake IT worker from North KoreaCyberScoop · 24 Jul 2024 · secondary source
- Date
- 15 Jul 2024
- Disclosed
- 23 Jul 2024
- Actor
- North Korean IT worker scheme (nation state), as attributed by KnowBe4
- Nexus
- North Korea
- Targets
- KnowBe4 (security awareness)
- What the AI did
- Social engineering, Deepfake
- Model
- unspecified AI image-enhancement tool
- Model family
- Unspecified
- Model basis
- stated by victim
- Autonomy
- assist
- Outcome
- Laptop started loading malware on arrival and was isolated in about 25 minutes; KnowBe4 says no data was accessed.