Government guidance, enforcement actions, investigative reporting, and practitioner research on candidate fraud and fraudulent remote IT worker operations—organized in one place.
GetReal Security explains how threat-led testing and adversarial research help organizations assess deepfake and identity-manipulation risk across real workflows.
The Justice Department announces its seventh and eighth U.S. facilitator sentences in five months, describing remote-access setups that made workers in China appear domestic.
Fortune examines the domestic facilitators, identity theft, laptop farms, and financial incentives that keep North Korea's employment-fraud operation running.
Two U.S. nationals receive lengthy prison sentences for helping North Korean IT workers use more than 80 stolen identities to obtain jobs at over 100 companies.
OFAC sanctions six individuals and two entities accused of helping North Korean operatives use stolen identities, fabricated personas, and fraudulent documents to target businesses.
CBS News reports on sanctions against people and companies accused of helping North Korean operatives obtain remote work and route earnings to the regime.
The Guardian reports on Microsoft's warning that operatives use face-swapping, fabricated personas, and AI-enhanced application materials to conceal their identities.
Huntress examines the use of AI-generated resumes, manipulated identities, interview assistance, and other techniques that make fraudulent applicants harder to identify.
Help Net Security summarizes the sentencing of Oleksandr Didenko, whose services supplied stolen identities and remote computers used by North Korean IT workers.
GitLab's threat-intelligence team describes observed personas, facilitator networks, identity-manufacturing workflows, and operational links across North Korean IT-worker teams.
Oleksandr Didenko received a 60-month sentence for a scheme that stole U.S. identities and sold them to North Korean workers who fraudulently gained employment at 40 companies.

The Wall Street Journal recounts a former North Korean IT worker's experience, including quotas, overseas dormitories, borrowed identities, and the pressure to earn money for the regime.