DTEX

DTEX researchers found that agentic AI tools like Anthropic’s Claude Cowork, when used in corporate environments, can be exploited for rapid data exfiltration through features like the Dispatch tool. Scenarios tested showed sensitive data could be stolen within 10-30 minutes, raising concerns about insider threats and nation-state actors using AI to bypass security. North Korean operatives working in Western tech firms were highlighted as a specific risk.

Two U.S. nationals, Kejia Wang and Zhenxing Wang, were sentenced for aiding North Korea's scheme to plant operatives in U.S. companies, generating over $5 million in illicit revenue. The conspiracy involved shell companies, identity theft, and espionage, including stealing sensitive military technology files.

North Korean hackers approached cybersecurity engineer Toufik Airane with an offer of $70,000 per month to use his identity for remote job interviews, with the salary to be split between them. The hacker, posing as "Benjamin," was identified by California-based security firm DTEX as being from North Korea. Those who participate in such identity-borrowing schemes risk being charged as accomplices to cybercrime.