After obtaining employment, the workers reportedly transfer<\/a> their earnings to\u00a0the North Korean state while maintaining access to\u00a0corporate systems.<\/p>\n The scheme typically involves applicants submitting resumes for remote software development or\u00a0IT\u00a0roles under stolen or\u00a0synthetic identities. In\u00a0many cases, intermediaries located in\u00a0the same country as\u00a0the employer assist with establishing a\u00a0local presence and facilitating the hiring process.<\/p>\n Artificial intelligence tools are used during several stages of\u00a0the operation. Voice-modulation software is\u00a0reportedly used during interviews to\u00a0conceal accents and present applicants as\u00a0candidates from Western countries.<\/p>\n Read more<\/p>\n CategoryLatest news<\/a>North Korean Hackers Stole $2 Billion in\u00a0Crypto in\u00a02025\u2014And They\u2019re Not Done Yet<\/a><\/p>\n \n Oct 08, 2025 14:05\n <\/p>\n Image-manipulation applications such as\u00a0FaceSwap allow operators to\u00a0insert faces into stolen identity documents and generate professional-looking profile photos for resumes.<\/p>\n The same tools are also used to\u00a0build convincing digital identities at\u00a0scale. Actors generate lists of\u00a0culturally appropriate names and corresponding email addresses, then combine them with AI-assisted resumes and cover letters tailored to\u00a0specific technology roles. <\/p>\n They also analyze job listings on\u00a0platforms such as\u00a0Upwork and other hiring websites to\u00a0extract required skills and adapt applications to\u00a0individual vacancies.<\/p>\n Microsoft reported that once hired, the workers continue using artificial intelligence tools to\u00a0maintain the appearance of\u00a0legitimate employment. AI\u00a0systems assist with writing emails, translating internal communications, and generating code, allowing the operators to\u00a0perform routine work tasks and avoid raising suspicion inside companies.<\/p>\n Read more<\/p>\n CategoryLatest news<\/a>Russia Supplies North Korea With Over 100\u00a0Elite Horses for Kim Jong Un\u2019s Military Units<\/a><\/p>\n \n Feb 02, 2026 17:54\n <\/p>\n The activity is\u00a0associated with several North Korean cyber groups tracked by\u00a0researchers as\u00a0Jasper Sleet and Coral Sleet. The operation appears to\u00a0combine financial objectives with long-term access to\u00a0corporate environments.<\/p>\n The company has previously disrupted infrastructure connected to\u00a0the scheme, including thousands of\u00a0email accounts used during recruitment and communication with employers.<\/p>\n Microsoft noted that artificial intelligence is\u00a0increasingly being integrated across multiple stages of\u00a0cyber operations, including reconnaissance, social engineering, and malware development. The same technologies can accelerate phishing campaigns, assist with vulnerability research, and help analyze stolen data after a\u00a0breach.<\/p>\n![\"North](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2026\/03\/1cf428a9dfc7fd8a0238a2d0f70cda21.jpg\")
<\/p>\n![\"Russia](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2026\/03\/6309e9c909603f1dffa0d0874f0a4d6c.jpg\")
<\/p>\n
![\"On](\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2026\/02\/(x810-y167-w1190-h672)-7f54d6f9a1e9b10de9b3e7ee663a18d9.png\")
![\"Logo\"](\"https:\/\/united24media.com\/static\/build\/img\/logo.qJ-S0EWo.svg\"){kind=logo}