TLDR InfoSec · ATTACKS & VULNERABILITIES
NORTH KOREA LURES ENGINEERS TO RENT IDENTITIES IN FAKE IT WORKER SCHEME
Summary from the TLDR InfoSec newsletter
North Korea's Famous Chollima are running a campaign in which they attempt to lure developers into renting their identities for illicit fundraising. The attackers offer legitimate engineers a percentage of the salary for a remote job if they grant the threat actor remote access to their computer. In some cases, they act as a frontman for the agent in interviews.