Microsoft warns of fake IT worker identities infiltrating cloud environments

Gbhackers •Mayura Kathir • April 22, 2026

Microsoft is warning that North Korea‑aligned group Jasper Sleet is abusing remote hiring to slip fake IT workers into cloud environments by posing as legitimate staff and then abusing trusted access. Since the pandemic, many companies hire globally, verify identities online, and onboard staff fully remotely. Jasper Sleet, tracked by Microsoft as a North Korean […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Jasper Sleet Exploits Remote Hiring to Infiltrate Cloud Environments Microsoft has issued a warning about the North Korea-aligned group Jasper Sleet, which is using fake IT worker identities to infiltrate cloud environments. This threat actor has been successfully hired by legitimate companies, gaining access to sensitive internal data through remote IT jobs. The tactic exploits the increase in global remote hiring practices that emerged during the pandemic, allowing Jasper Sleet to pose as legitimate staff. By leveraging trusted access, they can potentially compromise cloud infrastructures and sensitive information. The ongoing nature of these infiltrations raises significant concerns for organizations relying on remote work. Microsoft continues to track this group and its activities, emphasizing the need for enhanced verification processes in hiring. Current measures to counteract this threat are not detailed, indicating a need for immediate action from affected organizations. 2 sources 73

Microsoft warns of fake IT worker identities infiltrating cloud environments

The full story

Extracted Entities

APT Groups (1)

Countries (1)