North Korean fake IT worker schemes expand worldwide

North Korean groups are submitting up to 60 job applications a day and building fabricated personas to infiltrate Western companies. The PurpleDelta group created at least 22 fake identities, while WaterPlum infected over 30,000 devices across 100 countries and stole about $10.7 million from 7,000 crypto wallets.

• PurpleDelta created at least 22 fabricated personas for LinkedIn and Upwork applications
• WaterPlum infected 30,000+ devices in 100+ countries, stealing ~$10.7 million
• About 80% of targeted companies are based in North America
• Deepfakes and AI voice modulation make fake candidates harder to spot