North Korean IT Workers Pay People to Sit Through Job Interviews While They Control the Computer
Silent Push found North Korean IT workers recruiting on-camera proxies for job interviews while remotely controlling the computer, defeating identity and location checks.
Silent Push researchers engaged the "Tec Guru" persona via Discord and Telegram and assessed with moderate-to-high confidence that the operator is a North Korean IT worker recruiting on-camera proxies in the US, Europe, and Latin America for a 35/65 revenue split. During Google Meet interviews, the proxy stays on camera while the real worker supplies answers via ChatGPT-generated prompts, real-time messaging, or remote-control tools such as AnyDesk and TeamViewer. Successfully placed workers can access source code, cloud tenants, and CI/CD systems, and payments create sanctions exposure; the US, Japan, South Korea, and eight other governments issued a joint identity-verification alert on July 31, 2026.
- Operator offered a 35/65 revenue split to identity proxies recruited via a "Mouse Review" Discord ad.
- Real worker coaches the proxy or remotely controls their machine during coding tests using AnyDesk or TeamViewer.
- Recommended Astrill VPN, a service Silent Push previously linked to North Korean threat-actor infrastructure.
- July 31, 2026 joint alert from the US, Japan, South Korea, and others urged stronger identity verification.
- Vendors
- AnyDeskTeamViewerAstrill
- Threat actors
- North Korean IT workers
- Organizations
- Silent Push
- Countries
- North Korea
- AI models
- ChatGPT
From the original article
3 min read at gbhackers.com
North Korean IT-worker operators are recruiting foreign nationals to sit on camera during remote job interviews. At the same time, the real candidate provides answers, completes coding tasks, or remotely controls the proxy’s computer, according to new research from Silent Push. The campaign turns ordinary job seekers into identity and payment intermediaries, creating a direct […]
By Mayura Kathir · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.