TLDR InfoSec · ATTACKS & VULNERABILITIES

NORTH KOREA LURES ENGINEERS TO RENT IDENTITIES IN FAKE IT WORKER SCHEME

bleepingcomputer.com3 min read

Summary from the TLDR InfoSec newsletter

North Korea's Famous Chollima are running a campaign in which they attempt to lure developers into renting their identities for illicit fundraising. The attackers offer legitimate engineers a percentage of the salary for a remote job if they grant the threat actor remote access to their computer. In some cases, they act as a frontman for the agent in interviews.