A North Korean cybercriminal posing as a U.S.-based software engineer nearly infiltrated a prominent cybersecurity firm, according to a report published on Tuesday, using AI images to avoid detection in an effort that highlighted the growing sophistication of DPRK threats.

KnowBe4, a company specializing in security awareness training, warned that it had unknowingly hired a North Korean operative for a remote software engineering position. The individual reportedly used a stolen U.S. identity and AI-generated photos to pass multiple rounds of video interviews and background checks.

The scheme was uncovered shortly after onboarding, when the new hire’s company-issued laptop began loading