Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025
Wagemole campaign (fake identities for remote IT jobs) · identified November 2023
(MSMT/2025/2, report p. 38) ““Wagemole” is a DPRK-linked cyber campaign first identified by U.S. cybersecurity firm Palo Alto Networks in November 2023 in which North Korean cyber actors create fake identities using generative artificial intelligence tools such as ChatGPT to apply for remote IT jobs, with the aim to generate revenue and engage in corporate espionage.”