When the map lies at sea.

Mar 3, 2026

Evan Gordenker, Director of AI Security and DPRK Operations at Unit 42, investigates North Korea’s tech labor and recruitment schemes. He discusses how generative AI powers fraudulent interviews, code and deepfakes. He outlines accomplice networks, paid proxies, and why HR and cross-organization detection must evolve. Conversation highlights the growing scale and hybrid tactics of DPRK hiring operations.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

North Korea's Mechanized IT Hiring Operation

North Korea runs a mechanized, large-scale IT hiring operation that funnels wages back to the regime.
They recruit skilled students, train English and CS, and coerce workers into remote jobs while extracting funds for weapons programs.

INSIGHT

Generative AI Powers Recruitment And Deepfakes

The DPRK extensively leverages generative AI across recruitment and operational stages.
They use AI for writing emails and code and for real-time deepfakes and accent modification during interviews.

ANECDOTE

Accomplices Pass Verifications And Enable Exfiltration

DPRK operations use accomplices to pass in-person verifications and to provide physical access.
They hire local workers to sit in offices, hand over remote control, and enable exfiltration from legitimate-looking environments.

Get the Snipd Podcast app to discover more snips from this episode

Get the app