Deepfake: IT service provider and software company, Poland 2025
A Polish AI company held interviews with two candidates behind whom the interviewers suspected the same person with deepfake faces; in the second technical interview, the applicant seemed considerably more confident.
- Incident · 2025 · Poland
- Evidence: one media report
- Deepfake
- Deception (social engineering)
- AI link
As of
What happened
Palo Alto Networks Unit 42 attributes such cases to the pattern of North Korean IT workers who obtain remote jobs under false identities.
Role of AI: According to Unit 42, North Korean IT workers use real-time face swapping in interviews; a researcher recreated such an identity in 70 minutes with consumer hardware.
- Affected
- Company (anonymous)
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- no / no
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Video job interviews with real-time deepfake
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Build simple checks into video interviews, such as asking the person to pass a hand in front of their face, because real-time deepfakes often fail at this.
Sources
- False Face: Unit 42 Demonstrates the Alarming Ease of Synthetic Identity Creation (opens in a new window) Palo Alto Networks Unit 42 · 2025-04-21
«While we can still detect limitations in current deepfake technology, these limitations are rapidly diminishing.»
Similar cases
- Deception (social engineering): IT service provider and software company, USA 2024
- Deepfake: IT service provider and software company, USA 2024
- Ransomware (extortion): IT service provider and software company, Switzerland 2026
- Ransomware (extortion): IT service provider and software company, Switzerland 2025