new

the candidate fraud case files.

read them

case files

candidate fraud, on the record.

documented cases of the North Korean IT scam, deepfake candidates, proxy interviews, answer-feeding tools, job stacking and recruiter impersonation. what happened, how it was detected, what it cost, and what would have prevented it. every fact links to a primary source.

case file 09 · September 2026resume fraud

nearly half the applications

A hiring verification company that has screened more than 11 million applications found that the share of U.S. remote IT applications showing North Korean fraud patterns rose from 11 percent in late 2024 to 47 percent in late 2026.

47%of remote IT applications, Q3 2026
11%the same measure, Q3 2024
175kflagged applications analysed
read the case
case file 08 · August 2026north korean it scam

it is not only engineering roles any more

Huntress documented three 2026 cases outside technology: an Australian healthcare company with three fraudulent employees, a finance firm where hardware was wired into a workstation to stream video into Zoom, and a sales hire who had face-swapped himself into a real person's ID documents.

3documented 2026 cases
13 daysfrom onboarding to detection, one case
3fraudulent hires at one healthcare firm
read the case
case file 06 · July 2026north korean it scam

inside a federal agency

In July 2026 an FBI deputy assistant director told a government technology panel that the Bureau had identified, that week, a North Korean remote IT worker employed as a contractor at a U.S. federal agency.

1federal agency, confirmed
ongoinginvestigation
read the case
case file 07 · April 2026synthetic identity

the persona factory

Group-IB traced a reusable-identity ecosystem running since at least 2021: the same GitHub account renamed from one invented engineer to another, AI-generated headshots, and stored logins for every freelance and payment platform that matters.

42GitHub accounts
79email addresses
23fake portfolio domains
read the case
case file 12 · December 2025recruiter impersonation

the recruiters who never sent that email

Scammers impersonate real recruiters at real companies, run fake interviews, send fake offer letters, and ask the candidate for money. The recruiters whose names are stolen find out when victims contact them.

160+impersonated recruiters catalogued publicly
24,688employment fraud complaints to the FBI in 2025
$363mreported losses to job seekers in 2025
read the case
case file 04 · October 2025proxy interview

from Jalisco, without the Spanish

Bitso's security team documented two applicants for a senior engineering role who used stolen resumes and AI-generated faces, said they were from Jalisco and Chihuahua, and could not speak Spanish. Their LinkedIn profiles vanished after the interviews.

2applicants, one role
0words of Spanish spoken
same dayprofiles deleted after the call
read the case
case file 01 · July 2025north korean it scam

the laptop farm in a suburban house

For three years, a woman in Litchfield Park, Arizona kept dozens of company laptops running in her home so North Korean IT workers could appear to be logging in from America. 309 U.S. companies paid them.

309U.S. companies affected
68stolen American identities
$17mrevenue generated
read the case
case file 11 · July 2025job stacking

the engineer with four jobs

A software engineer was hired by a string of venture-backed startups at the same time, without telling any of them. It only unravelled when one founder posted a warning and other founders recognised the name.

~$200kbase salary offered, per role
severalconcurrent employers
one postis how it came apart
read the case
case file 05 · June 2025north korean it scam

29 laptop farms, 16 states, one week

In June 2025 the Justice Department searched 29 known or suspected laptop farms across 16 states, seized 29 financial accounts and 21 fraudulent websites, and charged the American facilitators making the whole thing possible.

29laptop farms searched
16states
100+U.S. companies affected
read the case
case file 10 · 2025answer feeding

the tool that says it out loud

A Columbia student built software that fed him answers during a technical interview, used it to get an Amazon internship, was suspended, and turned it into a venture-funded company whose slogan is cheat on everything.

$20m+raised by one such company
invisibleto the interviewer, by design
Googleconsidered ending virtual interviews
read the case
case file 03 · March 2025deepfake

put your hand in front of your face

Hiring for one backend role out of about 500 applicants, security startup Vidoc got two AI-deepfaked candidates deep into its pipeline. One was exposed by a request that took three seconds: cover part of your face with your hand.

2deepfaked candidates in one pipeline
~500applicants for the role
3 secto break the filter
read the case
case file 02 · July 2024north korean it scam

the security company that hired one

KnowBe4 trains other companies to spot social engineering. It interviewed a principal software engineer four times on video, ran a background check, checked references, hired him, and shipped him a Mac. Malware started loading 25 minutes after it arrived.

4video interviews passed
25 minfrom delivery to malware
0data lost
read the case

human intelligence,on your side.

switch it on today. tomorrow you read a shortlist, not a pile.

create your accounttry the demo

free to start, no credit card, set up in minutes

Product Hunt#7 Product of the Day