The Human Element: Jasper Sleet and DPRK Employment Fraud
DPRK-aligned threat actors, specifically those tracked as Jasper Sleet, are infiltrating Western technology firms by securing legitimate remote employment through synthetic identities and AI-generated personas. By leveraging residential proxy networks and deepfake technology to bypass KYC and I-9 verification, these actors establish an "ultimate insider" position. This vector enables direct sanctions evasion via salary diversion and creates high-risk supply chain vulnerabilities, including the insertion of malicious code into corporate repositories and the theft of intellectual property. Mitigation requires transitioning from perimeter-based security to a rigorous Zero Trust identity lifecycle and behavioral monitoring of privileged technical roles.