Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

False Face: Unit 42 Demonstrates the Alarming Ease of Synthetic Identity Creation

Summary: Unit 42 demonstrated that a single researcher with no image manipulation experience, limited deepfake knowledge and a five-year-old computer built a synthetic identity for job interviews in 70 minutes, using only an AI search engine, a passable internet connection, a GTX 3070 GPU purchased in late 2020, single images from thispersonnotexist[.]org and free deepfake tools. The report ties a surge in candidates using real-time deepfakes during job interviews to DPRK IT worker operations, citing a Pragmatic Engineer case study in which a Polish AI company encountered two separate deepfake candidates suspected of being the same operator.

Why it matters: North Korean IT workers can now interview for the same position multiple times under different synthetic personas and avoid being added to security bulletins and wanted notices, and the technical barriers keep falling as AI-generated faces, document forgery and real-time voice and video manipulation improve. A 70-minute build time on cheap hardware means your hiring pipeline, not a nation-state's capability, is the control that has to hold.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026