On July 23, 2024, KnowBe4 announced that a North Korean hacker attempted to infiltrate its systems. According to the statement, the hacker constructed a believable identity by leveraging a valid yet stolen identity based in the United States and using an AI-enhanced image. After interviews were conducted, the hacker passed background checks and reference checks and received the job. The hacker was sent a company device, and they began to load malware onto it. Once the SOC recognized something was amiss, the device was contained and the hacker’s infiltration attempts were unsuccessful. The announcement asserts that this incident is a part of an organized, state-sponsored criminal ring. 

“The KnowBe4 incident reveals how state-sponsored attackers are evolving to create convincing fake identities. It’s clear we need to rethink our approach to security. This means implementing more rigorous vetting, constant monitoring and fostering seamless collaboration across HR, IT and security teams. By harnessing the power of machine learning and behavioral analysis, we can stay one step ahead of these sophisticated threats and safeguard our digital ecosystems.”