# Cyber Firm KnowBe4 Hires Fake IT Worker From North Korea 🕵️‍♂️

**URL:** <https://onehack.st/t/cyber-firm-knowbe4-hires-fake-it-worker-from-north-korea/287605>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [July 25, 2024, 2:53pm UTC](https://onehack.st/t/cyber-firm-knowbe4-hires-fake-it-worker-from-north-korea/287605 "2024-07-25T14:53:29Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [July 25, 2024, 2:53pm UTC](https://onehack.st/t/cyber-firm-knowbe4-hires-fake-it-worker-from-north-korea/287605/1 "2024-07-25T14:53:30Z")

</div>

**Summary:**

1. **Incident Overview** : **KnowBe4** , a cybersecurity firm, **hired a remote software engineer** who was later revealed to be a **North Korean threat actor** using a stolen identity and **AI-augmented images**. This deception was discovered after thorough background checks and multiple video interviews.

2. **Detection and Investigation** : Suspicious activities triggered an **internal investigation** by KnowBe4’s **InfoSec Security Operations Center team**. The investigation uncovered malware on a company-issued laptop and **AI-filtered photos** flagged by Endpoint Detection and Response software.

3. **Outcome and Response** : **KnowBe4** shared their findings with the **FBI** and **Mandiant** , confirming the fake employee’s origins. Despite the breach, **no data was lost or compromised**. The incident highlighted **weaknesses in hiring processes** and demonstrated the **sophistication of the threat actor**.

[Read more on CyberScoop](https://cyberscoop.com)