These North Korean hackers are advanced, creative and patient. I have seen/heard:
1. They pose as job candidates to try to get jobs in your company. This gives them a “foot in the door”. They especially like dev, security, finance positions.
2. They pose as employers and try to interview/offer your employees. During the interview, they will be a problem with Zoom and they will send your employee a link to an “update”, which contains virus that will takeover your employee’s device. Or they will give your employee a coding question and later send some “sample code”.
3. They pose as users and send you links in a Customer Support request. The linked page will have a virus to download of some kind.
4. They pay/bribe your employees, outsourced vendors for data access. Just a few months ago, a major India outsource service was hacked and leaked a major US exchange user data, resulting in user asset loss of more than $400m.
The list goes on…
To all crypto platforms, train your employees to not download files, and screen your candidates carefully.
Stay SAFU. 🙏
North Korean developers are eager to work for your company, but it's important to not get scammed by imposters when hiring. We built this portfolio to help you pick out the right North Korean IT worker for your company.