294

North Korean hacker got hired by US security vendor, immediately loaded malware (arstechnica.com)

submitted 1 month ago by jeffw@lemmy.world to c/technology@lemmy.world

12 comments fedilink hide all child comments

all 13 comments

sorted by: hot top controversial new old

[-] Imhotep@lemmy.world 38 points 1 month ago

Even though the photo provided to HR was fake, the person who was interviewed for the job apparently looked enough like it to pass.

why not send an actual picture of his face?

[-] Philippe23@lemmy.ca 21 points 1 month ago

My guess would be that they needed to get a mid-point between existing photos of the guy whose identity they stole and the guy that would show up in the video interviews.

[-] independantiste@sh.itjust.works 30 points 1 month ago

This is the company that made "The Inside Man", a series where a company gets infiltrated by not being careful enough of who they hire

[-] thurstylark@lemm.ee 10 points 1 month ago

Oh yeah, I remember having to watch those for onboarding. They weren't as cheesy as they could have been for an informational video.

I do appreciate how they're handling it, though. A public post-mortem is much more reassuring than damage control PR. Plus, being honest means they gain the IT folks who actually have to use their stuff as allies.

[-] independantiste@sh.itjust.works 4 points 1 month ago

Yeah, the series is pretty entertaining actually. And for the PR thing, they pitched it as a learning incident, and I agree with that, but they are lucky nothing truly bad happened because this company sends phishing tests, and a link could be replaced by the attackers - kind of like in a fake fake phishing email.

[-] piyuv@lemmy.world 15 points 1 month ago

The scam is that they are actually doing the work, getting paid well, and give a large amount to North Korea to fund their illegal programs.

So even if you do the work and do it well, you’re not allowed to spend your money how you see fit

[-] SpicyLizards@reddthat.com 14 points 1 month ago

Way to break that hard earned trust guys

[-] paridoxical@lemmy.world 10 points 1 month ago

They lost any trust when we learned they are a bunch of bat-shit scientologists.

[-] jaybone@lemmy.world 4 points 1 month ago

North Korea?

[-] sugar_in_your_tea@sh.itjust.works 10 points 1 month ago

I just wonder how many haven't been caught...

[-] sharkfucker420@lemmy.ml 9 points 1 month ago* (last edited 1 month ago)

Based

[-] ipkpjersi@lemmy.ml 4 points 1 month ago

How does that even happen lmao

this post was submitted on 25 Jul 2024

294 points (100.0% liked)

Technology

58146 readers

3432 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS