"In some instances, fraudulent workers demanded ransom payments from their former employers after gaining insider access, a tactic not observed in earlier schemes," Secureworks Counter Threat Unit (CTU) said in an analysis published this week.
"These North Korean workers are typically sent to countries like China and Russia, from where they pose as freelancers looking for potential job opportunities."
"What's more, multiple contractors could end up getting hired by the same company, or, alternatively, one individual could assume several personas."
"Secureworks said it has also observed cases where the fake contractors sought permission to use their company-issued laptops while working from different locations."
Collection
[
|
...
]