North Korean threat actors are using sophisticated methods, including generative artificial intelligence (GenAI) and fake companies, to distribute malware and secure illicit employment in U.S. and European tech firms. The operation known as Contagious Interview involves setting up front companies—BlockNovas LLC, Angeloper Agency, and SoftGlide LLC—in the cryptocurrency consulting industry to spread malware via job interview lures. These companies exploit job-themed social engineering tactics, luring targets to download malware families like BeaverTail, InvisibleFerret, and OtterCookie under the guise of coding assignments or browser fixes. The threat actors also use fraudulent profiles on platforms like LinkedIn and GitHub to enhance their deception, coupled with VPNs and proxy services to obscure their activities. The FBI has seized the BlockNovas domain as part of an action against North Korean cyber actors. The campaign uses AI to create convincing fake personas, facilitating the hiring of North Korean IT workers in Western companies. These workers, aided by U.S.-based facilitators, often hold multiple high-paying jobs simultaneously, funneling their earnings to the North Korean regime, reportedly linked to the DPRK’s Munitions Industry Department. Researchers have highlighted the extensive use of GenAI tools to manage communications, generate resumes, and conduct mock interviews, enabling minimally skilled workers to maintain employment and earn revenue for North Korea. AI tools also assist in automating job applications, enhancing resumes to bypass automated CV scanners, and using deepfake technology in interviews. Despite these efforts, the quality of deepfakes is not yet sufficient to deceive experienced interviewers. The Justice Department notes that North Korea has potentially earned hundreds of millions through these schemes. Companies like Coinbase are adapting their hiring processes, implementing rigorous vetting and requiring in-person contact to mitigate this threat. Okta has introduced features such as ID verification to help companies detect and prevent the hiring of illicit workers.