SentinelOne says DPRK affiliated IT workers have repeatedly tried to obtain remote jobs at the company, including roles tied to SentinelLabs intelligence engineering. Its team tracked about 360 fake personas and more than 1,000 applications linked to DPRK IT worker operations, using recruiting workflows to surface suspicious profiles for analyst review. The activity relied on stolen or fabricated personas, changing outreach tactics, front companies and logistics infrastructure for laundering or support. The report matters for DPRK tracking because it shows the scale of attempted insider access against a security vendor, not just isolated fake applicant incidents.