Product

Google Meet

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 17, 2026 · last 2h ago

Timeline2 articles

North Korean IT Workers Pay People to Sit Through Job Interviews While They Control the Computer

Silent Push found North Korean IT workers recruiting on-camera proxies for job interviews while remotely controlling the computer, defeating identity and location checks.

Silent Push researchers engaged the "Tec Guru" persona via Discord and Telegram and assessed with moderate-to-high confidence that the operator is a North Korean IT worker recruiting on-camera proxies in the US, Europe, and Latin America for a 35/65 revenue split. During Google Meet interviews, the proxy stays on camera while the real worker supplies answers via ChatGPT-generated prompts, real-time messaging, or remote-control tools such as AnyDesk and TeamViewer. Successfully placed workers can access source code, cloud tenants, and CI/CD systems, and payments create sanctions exposure; the US, Japan, South Korea, and eight other governments issued a joint identity-verification alert on July 31, 2026.

GBHackers12:51 UTC · 2h agoPhishing & fraud in the wild 2 sources

North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews

Silent Push links a Discord recruitment scheme to North Korean IT workers using AI, remote desktop tools and on-camera proxies to pass technical interviews.

Silent Push assessed with moderate-to-high confidence that a representative known as Tec Guru, recruiting on-camera proxies via a Mouse Review Discord advertisement, is a North Korean IT worker. The scheme proposed a 65/35 revenue split with the hidden worker, live coaching through Google Meet, AI tools including ChatGPT to fill knowledge gaps, and remote access tools such as AnyDesk, TeamViewer, and Chrome Remote Desktop during coding exercises. Fraudulent hires can gain insider access enabling data theft, extortion, payroll fraud, and sanctions exposure; a July 31, 2026 multinational warning urged stronger identity checks and payment scrutiny.

Cyber Security Newsupdated 12:51 UTC · 2h agofirst 11:56 UTC · 3h agoThreat actor 2 sources1

Appears with

vendor TeamViewer 2 organization Silent Push 2 product ChatGPT 2 vendor AnyDesk 2 threat actor North Korea IT workers 1 vendor Astrill 1 product Discord 1 product Telegram 1 threat actor North Korean IT workers 1 threat actor Tec Guru 1 ai model ChatGPT 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.