Case vidoc-deepfake-job-candidatesDeepfake fraudUnited States
Vidoc Security Lab catches two deepfake job applicants in live video interviews
Vidoc co-founder Dawid Moczadlo exposed two applicants using real-time face filters and ChatGPT-style answers in interviews; one refused to pass a hand over his face. Vidoc suspects a DPRK-style fake IT worker scheme.
MediumAttack using AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- Feb 11, 2025
- Location
- United States
- Target
- Vidoc Security Lab (hiring developers in Poland)
- Severity
- Medium
- Triggered by
- Unknown
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- None
What happened
Vidoc co-founder Dawid Moczadlo exposed two applicants using real-time face filters and ChatGPT-style answers in interviews; one refused to pass a hand over his face. Vidoc suspects a DPRK-style fake IT worker scheme.
Impact: No hire made; the company lost more than five hours of staff time and the video became a widely used example of interview deepfakes
Who triggered it
Actor: Unknown
Attribution: Vidoc suspects a fake IT worker scheme similar to those linked to North Korea; no confirmed attribution
Motive: Obtain remote employment under a false identity, likely for revenue or access
How it happened
Attack vector: Fabricated LinkedIn profiles and CVs with Polish and Serbian identities; live AI face filter on video calls; lagging, scripted answers
Root cause: Remote hiring relies on video calls that real-time deepfake filters can defeat; identity checks happened late in the process
Timeline
- First candidate rejected after glitchy camera and movement reveal a synthetic face
- Second candidate 'Bratislav' refuses hand-over-face test; interview ended and recording posted on LinkedIn
- The Register reports the cases; later coverage by Fox 26 Houston in August 2025
Response
Candidates rejected; Vidoc published the recording and advised employers to use physical tests and in-person checks
Current status: Contained
Sources (open in a new tab)
- The Register theregister.com
- Fox 26 Houston fox26houston.com
Cite this case
Vidoc Security Lab catches two deepfake job applicants in live video interviews. AI Threat Watch, case vidoc-deepfake-job-candidates, Feb 11, 2025. https://aithreat.io/cases/vidoc-deepfake-job-candidates/
Permanent link: https://aithreat.io/cases/vidoc-deepfake-job-candidates/