Okta Threat Intelligence found that DPRK IT worker facilitators use generative AI services throughout remote job fraud operations. The observed services help manage many personas and communications accounts, translate and summarize messages, generate or critique CVs and cover letters, run mock interviews, and test whether applications are likely to pass automated screening. Okta also observed suspected DPRK personas using real time deepfake video during interviews and logistics services that may redirect company devices to Western laptop farms. The report frames these tools as a scaling layer for DPRK revenue operations, with technology companies and remote technical roles especially exposed.