AI-Powered North Korean operatives are exploiting remote work trends to pose as employees at major European firms, leveraging stolen identities and AI-generated deepfakes to bypass security checks. Cybersecurity experts estimate these activities generated $6.8 million for Pyongyang between 2020 and 2024, with operatives infiltrating over 300 U.S. companies. Jamie Collier of Google’s threat intelligence team noted the scam’s spread to Europe, where agents now operate “laptop farms” in the UK, capitalizing on lax recruitment vetting. Amazon reported blocking 1,800 suspected operatives since April 2024, many targeting AI roles.

The scheme involves identity theft via dormant LinkedIn accounts and AI-generated emails to avoid cultural or linguistic red flags. Experts warn companies must strengthen workforce authentication to counter this state-backed enterprise.