Tokyo Tech Firm Catches AI Avatar in Job Interview; North Korean Link Suspected
AM730 · 2 SOURCES1 day ago2 MIN
Summary
A Tokyo-based technology company has uncovered what is believed to be the first documented case of an AI-generated impostor attending a job interview. The applicant displayed telltale signs of deepfake technology, including mismatched voice and lip movements, vacant eye contact, and even mispronouncing the company name. The interviewer's probing question, 'Are you using AI to speak?' was met with an awkward attempt at deflection that further exposed the deception. Security experts warn this incident may represent a coordinated operation by North Korean IT personnel seeking to infiltrate foreign companies for financial gain and cyber espionage.
Key Points
- The incident occurred during an online interview at KOWRO, a Tokyo technology firm, where the CEO Harada Kenji (Harada Kenji) served as the interviewer; the viral clip lasted 2 minutes and 11 seconds
- The AI applicant spoke fluently about their experience but showed desynchronized audio-visual output, wandering gaze, and erroneously pronounced the company name
- When confronted, the candidate claimed 'It's that person themselves speaking' using improper honorific language, immediately confirming they were not the actual person
- A subsequent investigation revealed the same deepfake identity had targeted at least one other company, suggesting a coordinated impersonation campaign
- An 11-nation coalition including the United States and Japan documented over 5,000 victimized companies and 6,500+ impersonation cases, prompting the FBI to issue suspect alerts
Why It Matters
This incident exposes a new frontier in cyber threats where AI-powered job applicants serve as entry points for corporate espionage. For Hong Kong's tech sector and financial institutions—prime targets for state-sponsored hacking—the case demonstrates how readily available deepfake technology can bypass remote hiring processes. Security experts recommend that even fully remote positions require at least one in-person verification stage, while HR departments should train interviewers to detect AI artifacts and scrutinize candidates requesting cryptocurrency payments or non-personal bank accounts .
This incident exposes a new frontier in cyber threats where AI-powered job applicants serve as entry points for corporate espionage. For Hong Kong's tech sector and financial institutions—prime targets for state-sponsored hacking—the case demonstrates how readily available deepfake technology can bypass remote hiring processes. Security experts recommend that even fully remote positions require at least one in-person verification stage, while HR departments should train interviewers to detect AI artifacts and scrutinize candidates requesting cryptocurrency payments or non-personal bank accounts .