The Fake IT Worker Problem CIOs Can't Ignore
CIO, Tuesday, May 5th, 2026
Fake IT workers using AI are infiltrating organizations as insider threats, requiring coordinated defensive measures.
Thousands of fake IT workers, including state-sponsored operatives from North Korea, are exploiting remote hiring practices to gain trusted access to corporate systems using AI-generated resumes, deepfakes, and identity fraud. Amazon has blocked over 1,800 North Korean attempts to secure IT roles, while SentinelOne tracked roughly 360 fake personas linked to North Korean operations across the US.
Once hired, these impostors become insider threats capable of stealing data, disabling security tools, and establishing persistence on systems. Organizations can detect and mitigate these threats by implementing stronger identity verification, assigning personnel to track hiring anomalies, enforcing zero-access policies for new hires, and monitoring behavioral telemetry post-employment.
Gartner predicts that one in four candidate profiles worldwide will be fake by 2028, making this an escalating problem that requires coordinated effort across hiring, security, and IT leadership.