US dismantles laptop farm used by undercover North Korean IT workers(bleepingcomputer.com) |
US dismantles laptop farm used by undercover North Korean IT workers(bleepingcomputer.com) |
I've had several emails from strangers over the past month asking to use my identity (i.e. Upwork profile), setup a report laptop, and "collaborate".
Until now I've just ignore them or mark them spam.
Such an off-handed manner of presenting a really strong accusation! How did they do it exactly, directly, or just being citizens and paying taxes?
You can also read the DoJ press release if you want [3], but you'll probably be blocked by their WAF as you're based in Russia
[0] - https://cloud.google.com/blog/topics/threat-intelligence/apt...
[1] - https://duo.com/decipher/north-korean-apt45-goes-for-the-mon...
[2] - https://malpedia.caad.fkie.fraunhofer.de/actor/apt45
[3] - https://www.justice.gov/usao-mdtn/pr/department-disrupts-nor...
> You can also read the DoJ press release if you want
It doesn't mention APT45, fwiw.
> but you'll probably be blocked by their WAF as you're based in Russia
Your HN user locator is off. Even if it weren't, disclosing physical location of a person is bad manners, at the very least.
Where did that come from? Can you elaborate on this? I'm sensing "ha, you must be ruzzian to even ask that, and you obviously do that in bad faith".
Sorry if I'm off-base.
Wow! It’s truly sad that qualified people are struggling to get through interviews and hoops to get hired, but North Korean hackers are landing jobs.
If you're talking about the North Koreans doing this, I kind of don't blame any of the citizens, they're all victims of a brutal regime and are doing whatever to survive (literally). Yes there are truly bad actors too but it's hard to tell what's what. (Not excusing their behavior from OUR point of view)
So, whether or not they are victims themselves, they need to be stopped.
> The US jobs market is crazy
Depends on skillset as well. The biggest driver for jobs moving abroad is the fact that most CS programs no longer require low level or backend knowledge (distributed systems, OS internals, networking, database internals, C/C++) or teach it at a very high level.
Meanwhile, universities in CEE, Israel, India, etc still club CE and CS into a single degree (NAND to Tetris to React), making students much more well rounded for tech roles.
For example, my alma mater (Ivy League or Ivy Tier) stopped requiring the OS/Systems Programming class that made you diffuse the GDB bomb or truly understand how malloc works. Same thing at other peer universities except EECS@Cal, CS/ECE@UIUC, and CS/ECE@CMU.
"We have the Dark Army at home."
The Dark Army at home:
If you're able to lie about pretty much everything and hire an SME to ace the interviewing process, then you too can commit identity fraud for employment.
(I have enough contracting work through my client network anyway, was just amusingly asking)
On the other hand, a long running Zoom session can remain undetected due to it's normality.