North Korean Hiring Fraud Runs on AI and US Laptop Farms
ID: 8a0b6d42-3ccf-5c58-a2d2-206a3c3dea72
STIX ID: report--8a0b6d42-3ccf-5c58-a2d2-206a3c3dea72
Feed Name: Infosecurity Magazine (News)
Threat Score
Nisos uncovered a North Korean scheme that places fake remote IT workers into Western firms using stolen identities and US-hosted "laptop farms" controlled via PiKVM and mesh VPNs (Tailscale), with evidence of widespread operations (hundreds of farms, ~40 devices per site) and routing of wages through US accounts to fund the regime; defenders are advised to tighten remote-hiring vetting, probe interviews for AI-coached responses, and monitor device behavior after hire.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.