Amazon Catches North Korean IT Worker by Tracking Tiny 110ms Keystroke Delays

Amazon detected and expelled a North Korean operative who accessed a corporate laptop through a contractor proxy after noticing unusual network latency in keystrokes; the report frames this as part of a broader DPRK campaign using fake resumes and "laptop farmers" to place remote IT workers in U.S. firms, with Amazon blocking roughly 1,800 such hiring attempts since April 2024 and authorities prosecuting facilitators.