Read more: cyberscoop.com
North Korean threat actors have been using a sophisticated identity fraud scheme to infiltrate Western firms and gain positions as developers and other IT workers. They leverage fraudulent identities to dupe HR departments and obtain access to sensitive information, including trade secrets and critical data. This scheme is evolving, now involving extortion. After infiltrating a company, the threat actors steal trade secrets and hold them for ransom, demanding payment to avoid disclosure or damage to the company’s reputation. This tactic demonstrates a shift in North Korea’s cyber espionage activities, moving beyond data theft and towards financially motivated extortion. The scheme relies on well-crafted profiles and social engineering tactics to deceive HR departments, highlighting the importance of robust vetting processes and cybersecurity awareness training for employees.