North Korean IT Workers and the Rise of Proxy Hiring Risks
-

ESET’s findings also connect DeceptiveDevelopment to a broader campaign involving North Korean IT workers fraudulently securing jobs at overseas companies. Using AI-generated resumes, altered photos, and even face-swapping during video calls, these workers convincingly impersonate legitimate candidates, particularly in Europe and the United States.
For employers, the risk goes far beyond a bad hire. Proxy interviewing can expose organizations to insider threats, data theft, and sanctions violations. As remote hiring accelerates, developers and companies alike are being urged to tighten verification processes and treat unsolicited job offers—especially in crypto—with extreme caution.