North Korea lures engineers to rent identities in fake IT worker scheme
ID: 52ba0d0f-d20f-55d6-b603-8bcaf586a1e6
STIX ID: report--52ba0d0f-d20f-55d6-b603-8bcaf586a1e6
Feed Name: Bleeping Computer
Threat Score
Security researchers documented how Famous Chollima (part of North Korea’s Lazarus group) runs a recruitment fraud operation that tricks or pays legitimate developers to act as frontmen or provide remote access to their machines; the campaign uses stolen identities, AI/deepfake assistance, AnyDesk remote access, Astrill VPN, and KYC data harvesting to infiltrate Western companies and generate revenue or enable espionage.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.