North Korean Cyber Fraud Expands into Healthcare and Sales Sectors

North Korean cyber actors are expanding job fraud schemes beyond IT into healthcare and sales, using AI, forged documents, and remote access tools like PiKVM to infiltrate organizations. The campaign involves synthetic identities, multi-account management, and AI-driven interview tactics to evade detection and fund regime activities.

Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seeking job opportunities beyond the information technology (IT) sector, with recent investigations identifying suspected workers employed in sales and marketing and the medical profession.

The ongoing insider threat is part of what has been described as the IT worker scheme,

Read original article