You Can't Trust Your Zoom Call Anymore. Deepfakes, DPRK & the New Attack Surface

Future of Threat Intelligence · Mar 26, 2026 · 42m

Deepfakes have moved well past the uncanny valley and into active threat operations, and Tom Cross, Head of Threat Research at GetReal, has the client-side case studies to back it up. Tom explains how North Korean IT worker infiltration campaigns have transformed HR and video conferencing from administrative functions into active attack surface, albeit one that most security teams aren't monitoring, logging, or ingesting into their SIEM.

Drawing on a long-running collaboration with a former West Point professor and intelligence officer, Tom also applies the military framework of tactical…