Deepfake Spies: North Korea's Infiltration of US Tech Workforce

CrowdStrike's analysis reveals a critical shift in cyber warfare: North Korean operatives—disguised as remote workers using AI-generated deepfakes—now account for nearly half of all state-sponsored intrusions targeting US tech companies. This represents a sophisticated hybrid attack combining identity fraud, credential abuse, and cryptocurrency theft to simultaneously fund nuclear weapons development while stealing intellectual property. For the tech industry, it signals that hiring and remote work security must become priority concerns, as traditional perimeter defenses no longer protect against threats that operate from within the organization.