CrowdStrike — FAMOUS CHOLLIMA infiltrated 320+ companies via GenAI-assisted hiring fraud
Date: 2025-08
Affected: Multiple GenAI tools; US tech, defense, aerospace, retail firms
Attack vector: tool-abuse
Category: threat-report
Severity: Critical

CrowdStrike disclosed that the DPRK-nexus FAMOUS CHOLLIMA infiltrated 320+ companies (220% YoY) via generative-AI-assisted resumes, deepfake video-interview personas and AI-driven on-the-job code production, juggling 3-4 simultaneous remote engineering jobs at US firms.


Mitigations:

Architectural layers (MAESTRO):