Nisos Uncovers North Korean Cell Behind 167,000 Fake Job Applications to U.S. Companies

Nisos announced in a press release that it has uncovered a North Korean employment fraud operation responsible for submitting more than 166,000 fake job applications to U.S. companies. The research found that the Democratic People's Republic of Korea-linked cell secured 76 job offers between December 2024 and September 2025 using artificial intelligence, stolen identities, and U.S.-based facilitators.

The investigation revealed a coordinated group of 22 operatives who targeted technology, consulting, healthcare, and financial firms. Each operative managed multiple fake personas and used AI-generated resumes, AI-assisted interview tools, and voice training software to conceal their true identities. Technology companies accounted for nearly 43 percent of successful job offers.

The cell maintained a structured organization with administrators, managers, team leads, and external facilitators. U.S.-based facilitators were recruited to attend interviews, complete onboarding tasks, and manage employer-issued devices. Payments were often made through cryptocurrency.

Nisos began its investigation after detecting a suspicious applicant for a remote AI architect role. Working with law enforcement, the company linked the applicant to a larger DPRK network that used remote access tools and identity brokers to infiltrate corporate systems. The findings highlight how AI is being used to automate and scale employment fraud operations targeting U.S. organizations.