Separate investigation has highlighted IT worker personality seeking employment in Germany and Portugal.
DPRK IT workers are getting work through various online platforms, including upwork, telegram and freelancer. Payments were sought in various ways including Cryptocurrency, Wise Money Transfer Service and Paneer.
Forced recovery playbook
Google says that the strategy already identified by the DPRK IT Worker Crew has ramped the post -employment efforts.
“Recently it was fired, the workers threatened to release the sensitive data of their former employers or to provide it to a competitor,” the researchers at Google said. “This data included ownership data and source codes for internal projects.”
Earlier, DPRK IT workers can be eliminated from their employment places, which can try to achieve or re -achieve references, but law enforcement action and more awareness have inspired some groups to adopt more aggressive measures according to Google. North Korean groups have started operating within corporate virtualized infrastructure, Google warns in April,
Find out is ‘challenging’
Using chatbots, “potential fares” are completely stitched their resumes, and take further advantage, who take advantage of the AI-Create deepfack to poses as real people.
North Korean operators usually use face-changing software during video interviews or rely on AI assistants to help answer questions in real time.
Former intelligence analyst Crystal Morin for the US Air Force replaced a cyber security strategist at Systeding, told CSONLION that North Korea is mainly targeting technical firms hiring American government institutions, defense contractors and IT workers.
According to Morin, “companies in Europe and other Western countries are also at risk.” “North Korean IT workers are either trying to get jobs due to financial reasons – to fund the weapon program of the state – or for cyberspies.”
Morin said: “In some cases, they can try to get jobs in tech companies to steal their intellectual property before using to create their own knock-off technology.”
“These are real people with real skills in software development and are not always easy to find out,” he warned.
countermeasures
IT managers and CISOs need to work more closely for applicants with their colleagues in human resources. Additional technical controls can also help.
Here are some suggestions to improve the recommended process:
- Conduct live video-chats with potential remote work applicants and ask them about your work projects
- See for career discrepancies in resume or CVS
- Check the reference by calling the referee to confirm any email reference
- Confirm the residence address supplied
- Review and strengthen access control and authentication procedures
- Monitor the equipment supplied for piggibacking remote access
There is a need to continue post-hire check. According to Knowbe4, employers must beware of the sophisticated use of VPNS or VMS to reach the company system. The seller said that the use of VoIP numbers and lack of digital footprint for contact information are other red flags.
David Feligno, Managing Service Provider Huntress, the lead technical recruiter, told CSOONLINE: “We have a multi-step process to try to verify whether a background looks great to be true-it means that this person is stealing someone else’s profile, or simply claiming their current space. Is – we know that it is a fake resuxion.
“If this is the same, have this person recently created a linked -up profile and does not have any connections or followers?”
Huntress also checks that the phone number supplied by an applicant is valid, as well as a Google search on them.
“All of the above will save you a lot of time, and if you see anything that does not match, you know that you are working with a fake profile, and it happens a lot,” Feligno concluded.
The CISO of Brian Jack, Knowbe4, agrees that fake distance employees and contractors are something that every organization needs to worry, saying: “CISOs should review the organization’s processes and ensure that their overall risk management practices are involved.”
The hired teams should be trained to ensure that they are investigating the resume and to ensure more well to ensure that the person they are interviewing is real and they say they say they are, Jack advises. The best would be that they are using the ID issued by their government as well as individually or reliable agents, such as use of background check firms-especially using AI enters the mixture of hiring schemes like these.
“One thing that I like to do as a hiring manager is to ask some questions that will be difficult to prepare for AI and it will be difficult for AI to work hard, but it is easy for a person to talk about what they claim to be,” Jack says.
