Quarterly Threat Report – Q1 2026
Social engineering scams such as phishing attacks, have fueled the “fake employee” problem emanating from threat actors sponsored by the Democratic People’s Republic of Korea. Numerous cyber campaigns and incidents highlight the increasing need for reliable, human verification online. This paper outlines the evolving threat around falsified human identities supported by valid credentials in digital systems, and calls for novel tools to prevent single-points-of-failure that lead to compromises.
Is your company inadvertently funding North Korea's WMD Program?
This threat report launches our quarterly series examining emerging cybersecurity issues. Each report analyzes contemporary cyber threats through real-world examples and case studies, then provides actionable solutions for security teams.
North Korean state-sponsored threat actors have weaponized social engineering—particularly phishing attacks—to create a growing "fake employee" problem. These operatives secure legitimate positions at companies worldwide, funneling their salaries back to the DPRK regime. Recent campaigns demonstrate an urgent need for reliable identity verification before the hiring process begins. This report examines how falsified identities backed by stolen or fabricated credentials are penetrating organizations, and explores verification tools that can prevent these single points of failure.
Download our Quarterly Threat Report →
or, read the press release.
Everything encrypted.
Secure group chats, DMs, and calls. Only the people in the conversation can see what’s shared.
Get the app.
Download on iOS and Android.
