North Korea infiltrates U.S. companies via stolen identities, AI

The Wall Street Journal's yearlong investigation has exposed a sophisticated campaign in which North Korean operatives are infiltrating American companies to steal money and potentially sensitive information. The operatives employ a multi-layered approach: they use stolen identities to create fraudulent job applications and credentials, deploy AI tools to strengthen their impersonation and communication, and recruit American accomplices to facilitate placement and ongoing operations within target firms. According to the findings, one team successfully infiltrated eight U.S. companies within just a few months, demonstrating both the efficiency and scalability of the operation. The ultimate objective is to funnel millions of dollars back to the North Korean regime, transforming American payroll systems into a revenue stream for a sanctioned government. This approach bypasses traditional cybersecurity defenses by embedding operatives directly into the workforce, granting them legitimate access to company networks, financial systems, and proprietary information. The investigation suggests this is not an ad-hoc effort but rather an organized, repeatable campaign that exploits gaps in identity verification, background checking, and employee onboarding procedures at U.S. corporations.