Researching Employment Scams
Schneier highlights research into North Korean fake-employment IT-worker scams that embed operatives in remote roles for long-term insider access.
The post discusses research into employment scams in which fabricated remote workers, associated with North Korean IT-worker schemes, embed in organizations for months or years to exfiltrate data or position for financial theft. Researchers used controlled sandbox environments to observe operatives syncing personal accounts and working under false identities. Commenters also note reverse scams targeting desperate job seekers through high-pressure MLM and door-to-door sales schemes.
- Fake remote employees can persist for years while exfiltrating data or stealing funds
- Controlled sandbox environments were used to observe suspected DPRK IT workers
- Background checks and ongoing verification urged for remote hires
- Commenters note reciprocal scams exploiting job seekers via MLM-style schemes
- Threat actors
- DPRK IT workers
- Countries
- North Korea
From the original article
1 min read at schneier.comResearchers built a fake company to study fake employee scams.
By Bruce Schneier · schneier.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.