DTEX Systems released a threat advisory about North Korean remote IT workers who seek employment under false identities to fund weapons programs. Key warning signs include multiple online identities, unusual banking activity on corporate devices, excessive use of remote access tools, and behavioral anomalies like minimal collaboration and reluctance to appear on video calls. Organizations should integrate HR data with cybersecurity monitoring and use behavioral analytics to detect these sophisticated social engineering attempts that exploit the global IT skills gap. Microsoft’s write-up on the group it tracks as Jasper Sleet adds AI face swapping on stolen identity documents and experiments with voice-changing software, and reports 3,000 suspended Outlook and Hotmail accounts created by these workers. On the same day, the US Justice Department announced searches of 29 known or suspected laptop farms in 16 states, with about 200 computers seized in schemes that hit more than 100 US companies.
