Four DPRK IT workers entered one hiring pipeline. Here’s the infrastructure-layer detection that stopped them before credentials were issued.
Four DPRK IT workers detected in a single hiring cohort of 600. Network, device, and identity signals. Zero credentials issued.
Timeline of North Korean IT worker coverage moving from podcasts and government warnings to the FBI, The Wall Street Journal and Fox News.
You have been warned: eleven governments just put the North Korean IT worker threat on the record.
Three vishing case files from one month at a retail help desk: every call sounded fine, and every flag came from the signals underneath it, not the voice on it.
What does help desk vishing look like in the wild? Across 450 password reset attempts in one month, imper.ai surfaced coordinated impersonation patterns that individual calls alone would have missed.
Impersonation attacks have moved beyond isolated incidents into a security category of their own. New Gartner research recognizes impersonation detection across both workforce identity and hiring, reflecting a growing problem that traditional identity verification alone wasn’t built to solve.
At Gartner SRM, one theme kept surfacing: organizations may have authentication covered, but identity is a different problem. Here’s what security leaders and new Gartner research revealed about the growing identity attack surface.
imper.ai is proud to announce we’ve been recognized in Redpoint Ventures’ 2026 InfraRed 100 list.
Voice phishing is the #1 initial infection vector for cloud compromises in 2025. Here is why the existing security stack misses it, and what closes the gap.
DPRK operatives are now embedded inside Fortune 500 payroll systems, hired through standard recruiting pipelines using AI-assisted personas, fraudulent identities, and infrastructure designed to bypass every check HR was built to run.