Case openai-dprk-employment-feb2025State actor AI opsUnited States
OpenAI disrupts North Korean IT-worker accounts writing fake resumes and interview scripts
ChatGPT accounts tied to the DPRK IT-worker scheme produced resumes, profiles and cover letters plus scripted excuses for suspicious behaviour such as avoiding video; some applications were posted on LinkedIn.
HighAttack using AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Feb 21, 2025
- Location
- United States
- Target
- Western companies hiring remote developers
- Severity
- High
- Triggered by
- North Korean IT worker network
- Actor type
- State-sponsored
- Reported loss
- None reported
- CVE
- None
What happened
ChatGPT accounts tied to the DPRK IT-worker scheme produced resumes, profiles and cover letters plus scripted excuses for suspicious behaviour such as avoiding video; some applications were posted on LinkedIn.
Impact: Fraudulent applications to Western employers; hires and losses not quantified by OpenAI.
Who triggered it
Actor: North Korean IT worker network
Attribution: OpenAI linked the activity to the DPRK remote-worker scheme described in US DOJ indictments.
Motive: Revenue generation for the North Korean regime
How it happened
Attack vector: LLM-generated applicant materials and interview coaching
Root cause: Text generation at scale made fraudulent applications convincing and cheap
Timeline
- OpenAI publishes the Deceptive Employment Scheme case
- OpenAI reports a further IT-worker cluster in its June 2025 report
Response
Accounts banned; findings shared with industry partners.
Current status: Ongoing
Sources (open in a new tab)
- OpenAI February 2025 report PDF cdn.openai.com
- AI Incident Database report incidentdatabase.ai
Cite this case
OpenAI disrupts North Korean IT-worker accounts writing fake resumes and interview scripts. AI Threat Watch, case openai-dprk-employment-feb2025, Feb 21, 2025. https://aithreat.io/cases/openai-dprk-employment-feb2025/
Permanent link: https://aithreat.io/cases/openai-dprk-employment-feb2025/