this post was submitted on 24 Jul 2024
48 points (100.0% liked)

Technology

37712 readers
213 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
alyaza@beehaw.org
TheRtRevKaiser@beehaw.org
gyrfalcon@beehaw.org
rs5th@beehaw.org
coldredlight@beehaw.org
Los@beehaw.org
SemioticStandard@beehaw.org
TheRtRevKaiser@kbin.social
remington@beehaw.org
48
How a North Korean Fake IT Worker Tried to Infiltrate Security Awareness Firm KnowBe4 (blog.knowbe4.com)
submitted 3 months ago by 0x815@feddit.org to c/technology@beehaw.org
7 comments fedilink hide all child comments
 

Archived version

KnowBe4 needed a software engineer for our internal IT AI team. "We posted the job, received resumes, conducted interviews, performed background checks, verified references, and hired the person," the firm writes on its blog.

"We sent them their Mac workstation, and the moment it was received, it immediately started to load malware."

[Special points to KnowBe4 for publishing this on its blog. If this can happen to a security awareness firm, it can happen to everyone.]

top 7 comments
sorted by: hot top controversial new old
[–] OmnipotentEntity@beehaw.org 14 points 3 months ago (3 children)

The scam is that they are actually doing the work, getting paid well

Listen. I know that there are some really shitty stuff going on in North Korea, and very real threats that their government is capable of, and it sucks for the people living there who have to do this work under threat of death.

But if you say that "the scam" is they're doing work and receiving full pay for work done, I'm going to make fun of you. Oh no, someone outside of the West did work and was slightly less exploited by capital than usual in the process. Horror upon horror.

[–] halm@leminal.space 17 points 3 months ago

Yeah, they seem to be downplaying the malware bit in that paragraph.

[–] Midnitte@beehaw.org 5 points 3 months ago

The scam is that they are actually doing the work, getting paid well

Ah, the ol' xz utils plan

[–] Rekhyt@beehaw.org 2 points 3 months ago

You cut off the second part of that sentence. The scam isn't doing the work from a different location, the scam is that they're using the money to fund North Korea. This isn't "Kim gets a job online" it's "Kim is a state actor that is a security risk at any moment and meanwhile causing KnowBe4 to send money to a sanctioned country."

[–] hazelnoot@beehaw.org 4 points 3 months ago (1 children)

It's good we have "Knewbies" in a sandbox when they start.

attention all companies: please stop making pet names for your employees, it's weird bee sob loud emoji

[–] sfera@beehaw.org 3 points 3 months ago

I consider myself a newbee.

[–] DoucheBagMcSwag@lemmy.dbzer0.com 2 points 3 months ago* (last edited 3 months ago)

Wow...this was the company that was founded by the legendary hacker Kevin Mitnick (RIP)

for shame.