Most Fraudulent Hires Receive Credentials Before Detection
HYPR report finds 42% of fraudulent hires pass screening and receive corporate credentials, averaging 5.73 days of unmonitored network access before detection.
A HYPR study of 500 US HR executives found 42% of fraudulent candidates pass pre-hire screening and get hired, with only 3% detected on their hire day and 20% remaining undetected up to three weeks. This gives fraudulent hires an average of 5.73 days of unmonitored corporate network access, and 98% of surveyed executives said they had experienced candidate fraud firsthand. The report follows a September 9 CISA update to its Insider Threat Mitigation Guide warning that malicious actors use AI tools to obtain remote IT jobs, a tactic long used by North Korean actors for data theft and extortion.
- 42% of fraudulent candidates pass screening and get hired; average 5.73 days unmonitored access
- 98% of 500 surveyed US HR executives experienced candidate fraud firsthand
- Only 3% detected same day as hire; 20% undetected up to three weeks
- CISA's updated Insider Threat Guide warns of AI-assisted fake IT job applicants
- North Korean actors use fraudulent remote workers for data theft and extortion
- ATT&CK
- T1078 Valid Accounts
From the original article
2 min read at infosecurity-magazine.com
A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.