Microsoft: North Korean hackers run AI across hiring scams

North Korean hackers now use AI at every step of the job scam, from both sides of the interview table. On October 29, Microsoft Threat Intelligence published a report on how DPRK groups put AI into their operations. Its call: adoption is high. Three groups use AI in all of their workflows. One group made more than 100 targeted PDF lures in two months, dozens of them minutes apart. For a small software shop that hires remote developers, or whose developers take recruiter calls, this is a direct risk. It is not a nation-state story you can ignore.

What actually happened

Per Microsoft's report, Microsoft puts each North Korean group on a four-stage scale of AI adoption:

• Operationalized: Jade Sleet, Coral Sleet and Jasper Sleet. AI is part of routine work across all of their operations.
• Accelerating: Diamond Sleet, Onyx Sleet, Pearl Sleet and Sapphire Sleet.
• Expanding: Emerald Sleet.

The specifics that matter for small businesses:

• Fake recruiters at speed. Between June 8 and June 12, Jade Sleet posed as recruiters for a fake "AI-powered blockchain intelligence company." It offered software engineering jobs and set up interviews. In the same window it ran similar campaigns through two more front companies.
• Fake candidates at scale. Jasper Sleet uses generative and agentic AI to build resumes and personas. It gets help on coding tests and keeps several fake workers' messages consistent. Microsoft also lists AI changes to profile photos, video and voice.
• Your private repos. Since April 2026, Coral Sleet has run a workflow that trojanizes private GitHub repositories. Microsoft says it was "highly likely" built with an AI development platform. Microsoft names Cursor as one tool these groups use for malware work.
• Agentic tools. Since late October, Onyx Sleet and Pearl Sleet have used ARTEX, an open-source agentic penetration testing framework.

Microsoft also says these operations are still human-directed, not autonomous. AI makes the same old attacks faster. It does not replace the operator.

Why it matters for your business

The interview is the attack surface. One lure tells your developer to clone a repo and run a "take-home test." A fake hire gets a laptop and repo access in week one. Both start in hiring, and AI has removed the typos and bad English that used to give them away.

Vet people on video, live. Do one unscripted video call with camera on, and ask questions that are not on the resume. Check that the candidate's profiles don't copy someone else's. Microsoft calls staffing agencies "the easiest avenue" for these workers. Ask your agency how it verifies identity.

Treat recruiter code as hostile. No developer runs a stranger's repo on a machine that holds your client credentials. Use a throwaway VM or a cloud sandbox.

Lock your private repos down. Require hardware keys or passkeys on GitHub. Remove contractor access the day the work ends. Turn on branch protection so no single account can push to main. A private repo is only as safe as the weakest account that can write to it.

Sources: Microsoft Threat Intelligence, Microsoft on Jasper Sleet IT workers.