Deepfake Job Applicants Target U.S. Companies and National Security
Foreign actors, particularly from North Korea, China, and Russia, are reportedly using deepfake videos and voice clones to fraudulently obtain remote jobs at U.S. companies, steal wages, and access sensitive data. The U.S. Justice Department confirmed over 300 firms hired impostors with North Korean ties, while deepfakes are also being used to impersonate executives in financially damaging scams.
What happened
Foreign actors, particularly from North Korea, China, Russia, Malaysia and South Korea, are using AI-generated deepfake videos and voice clones to create fraudulent job applicants at U.S. companies. The scammers use fake photo IDs and employment histories to pose as job candidates and pass interviews.
The U.S. Justice Department stated last year that more than 300 U.S. firms had inadvertently hired impostors with ties to North Korea for IT work. Criminal groups are also targeting cybersecurity and cryptocurrency companies that offer remote roles. A Singapore-based multinational corporation nearly lost US$499,000 when scammers using deepfake technology impersonated the company's chief financial officer on a WhatsApp message and Zoom call; the funds were recovered after police involvement. A Hong Kong-based company was duped into sending US$25 million in a similar deepfake scam.
Reported impact
The risks from hiring fake job seekers include installing malware, demanding ransom, stealing data and trade secrets, and accessing company funds. The scams pose political and national security risks through connections to foreign actors and potential weapons programs.
Gartner estimates that one in four job candidates globally will be fake by 2028. Deepfake job applicants have infiltrated defense contractors, Fortune 500 companies, and media networks, exposing data and creating financial risks.
Index analysis
The scammers rely on deepfake technology to create convincing video and voice impersonations of executives and job applicants. Reality Defender and other deepfake detection firms have introduced tools designed to integrate into enterprise video conferencing platforms and identify artifacts and inconsistencies in real-time video analysis that human observers cannot detect reliably.
Governance controls
Companies such as CAT Labs are implementing identity verification tools to weed out fraudulent job candidates. Companies have been trying to develop solutions to prevent deepfake fraud, including real-time video analysis integrated into video conferencing platforms.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.