North Korean Fake IT Worker Personas Reach Onboarding and Access Sensitive Corporate Data
Material Security has tracked fabricated North Korean IT worker personas infiltrating company hiring pipelines, with 27 personas reaching the onboarding stage over one year. These fake candidates, complete with résumés and faces, applied for remote engineering roles, with some active simultaneously at multiple organizations. At four companies where onboarding was reached recently, substantial numbers of sensitive files— including Social Security numbers, bank details, source code, and cryptographic keys—were widely shared internally, some accessible via public or company-wide links. Such insiders having valid credentials pose a significant risk if hostile. The researchers recommend integrating hiring and access controls, flagging suspicious personas early, conducting thorough background checks, and continuously auditing post-onboarding access to mitigate this threat.
Linha do tempo
-
North Korean Fake IT Worker Personas Reach Onboarding and Access Sensitive Corporate Data
ler a análise desta fonte ocultar
Material Security has tracked fabricated North Korean IT worker personas infiltrating company hiring pipelines, with 27 personas reaching the onboarding stage over one year. These fake candidates, complete with résumés and faces, applied for remote engineering roles, with some active simultaneously at multiple organizations. At four companies where onboarding was reached recently, substantial numbers of sensitive files— including Social Security numbers, bank details, source code, and cryptographic keys—were widely shared internally, some accessible via public or company-wide links. Such insiders having valid credentials pose a significant risk if hostile. The researchers recommend integrating hiring and access controls, flagging suspicious personas early, conducting thorough background checks, and continuously auditing post-onboarding access to mitigate this threat.