Case pindrop-ivan-x-deepfake-applicantDeepfake fraudUnited States
Pindrop unmasks 'Ivan X', deepfake engineering candidate traced near Russia-DPRK border
Pindrop said an engineering applicant called Ivan used deepfake video and generative AI in interviews; a recruiter saw lip-speech mismatch and his IP pointed to a possible Russian military site near North Korea.
MediumAttack using AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Apr 8, 2025
- Location
- United States
- Target
- Pindrop Security (hiring process)
- Severity
- Medium
- Triggered by
- Unknown
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- None
What happened
Pindrop said an engineering applicant called Ivan used deepfake video and generative AI in interviews; a recruiter saw lip-speech mismatch and his IP pointed to a possible Russian military site near North Korea.
Impact: No hire; the case became a widely cited example of AI-enabled applicant fraud and prompted Pindrop to extend detection to video meetings
Who triggered it
Actor: Unknown
Attribution: Pindrop reported the IP geolocation pointed to a possible Russian military facility near the North Korean border; no formal attribution
Motive: Gain remote employment and insider access under a synthetic identity
How it happened
Attack vector: Deepfake video and AI-generated persona during remote video interviews; later reapplied through a different recruiter
Root cause: Remote hiring pipelines lacked liveness and identity verification; synthetic video quality close enough to pass initial screening
Timeline
- Recruiter flags mismatch between facial movements and speech; Pindrop's video authentication confirms deepfake
- CNBC reports the case alongside Gartner's forecast that one in four candidates will be fake by 2028
Response
Candidate rejected; Pindrop studied the technique on a second application and launched interview deepfake detection
Current status: Contained
Sources (open in a new tab)
- CNBC via NBC News nbcnews.com
- AI Incident Database incidentdatabase.ai
Cite this case
Pindrop unmasks 'Ivan X', deepfake engineering candidate traced near Russia-DPRK border. AI Threat Watch, case pindrop-ivan-x-deepfake-applicant, Apr 8, 2025. https://aithreat.io/cases/pindrop-ivan-x-deepfake-applicant/
Permanent link: https://aithreat.io/cases/pindrop-ivan-x-deepfake-applicant/