Pyongyang’s Cybersecurity Conundrum: North Korean Tech Workers’ Identity Fraud Exposed

North Korea’s IT workers are known for their exceptional software development skills and proficiency in foreign languages such as English. However, a shocking revelation has exposed the widespread use of identity fraud by these hackers to gain access to lucrative freelance work opportunities in Korea, Democratic People’s Republic of.

Widespread Identity Fraud Exposed

The North Korean IT workers typically create fake identities by forging identification documents and replacing photos with their own using image editing software. They also utilize a “proxy phone call authentication service website” to bypass phone verification processes.

Methods Used to Avoid Detection

To avoid detection, the hackers have been known to:

• Borrow freelance work platform accounts from foreign nationals in exchange for a share of the generated revenue
• Establish business partnerships with non-North Korean freelance workers, collaborating on projects and splitting the profits
• Target social media platforms to find proxy account owners willing to lend out their authenticated accounts

Securing Employment Contracts

When it comes to securing employment contracts, the North Korean hackers prefer online text-based chat interviews instead of video conferences. They will often feign technical issues or audio problems to avoid face-to-face interactions, insisting on phone interviews instead.

Additional Measures

In some instances, even when companies conduct real video interviews, the DPRK IT workers have been known to remotely access the proxy account owner’s computer and demonstrate their programming skills themselves.

Revenue Generation

The revenue generated from these fraudulent activities is typically deposited into the proxy account owner’s bank account, with a portion paid out to them. The remaining funds are transferred to local IT team bank accounts, mainly via global digital payment platforms.

Establishing Long-Term Business Partnerships

Once established relationships with client companies have been formed, the North Korean hackers often propose direct communication on separate platforms to minimize commission fees and establish long-term business partnerships.

This shocking revelation highlights the need for enhanced cybersecurity measures to prevent identity fraud and protect against these types of attacks.