North Korean IT Workers Use AI and Remote Desktop Tools to Fake Technical Interviews
Silent Push links a Discord recruitment scheme to North Korean IT workers using AI, remote desktop tools and on-camera proxies to pass technical interviews.
Silent Push assessed with moderate-to-high confidence that a representative known as Tec Guru, recruiting on-camera proxies via a Mouse Review Discord advertisement, is a North Korean IT worker. The scheme proposed a 65/35 revenue split with the hidden worker, live coaching through Google Meet, AI tools including ChatGPT to fill knowledge gaps, and remote access tools such as AnyDesk, TeamViewer, and Chrome Remote Desktop during coding exercises. Fraudulent hires can gain insider access enabling data theft, extortion, payroll fraud, and sanctions exposure; a July 31, 2026 multinational warning urged stronger identity checks and payment scrutiny.
- Silent Push assessed 'Tec Guru' as a North Korean IT worker with moderate-to-high confidence.
- Scheme offered a 65/35 split with on-camera proxies, live Google Meet coaching, and ChatGPT for knowledge gaps.
- Remote tools AnyDesk, TeamViewer, and Chrome Remote Desktop could let off-screen operators complete coding tests.
- Risks include insider access, data theft, extortion, payroll fraud, and sanctions exposure for employers.
- IoCs: Discord account tecguru113 and Telegram handle @tecguru0618; Astrill VPN and US-style VoIP number noted.
- Vendors
- AnyDeskTeamViewer
- Products
- ChatGPTGoogle Meet
- Threat actors
- North Korea IT workersTec Guru
- Organizations
- Silent Push
- Countries
- North Korea
From the original article
4 min read at cybersecuritynews.com
North Korean operators are using artificial intelligence, remote-control software, and hired stand-ins to make fraudulent job candidates look genuine during technical interviews. The scheme turns routine hiring into a route for sanctions evasion, payroll fraud, data theft, and access to company systems. The activity surfaced through a job advertisement posted in the Mouse Review Discord […]
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.