In a new twist on hacking tactics, a North Korean cybercriminal infiltrated a company by posing as a legitimate IT contractor. The unidentified business, based in either the UK, US, or Australia, unknowingly hired this North Korean hacker for a short-term role. Within days, the hacker gained unauthorised access to sensitive company data, promptly exfiltrating it to use as leverage. Once the contract period ended, the hacker demanded a hefty ransom to prevent the release of the stolen information.
MORE: Has your Peloton been hacked? Maybe.
DISCOVER: How to hack the new Instagram algorithm
Secureworks, the cybersecurity firm investigating the case, revealed that this incident represents a significant escalation in North Korea’s online operations. “No longer are [the fake workers] just after a steady paycheck, they are looking for higher sums, more quickly, through data theft and extortion, from inside the company defenses,” explained Rafe Pilling, Secureworks’ Director of Threat Intelligence. The use of cybercriminals disguised as foreign contractors is a relatively new tactic in North Korea’s efforts to bring revenue to the regime. Previously, the UK’s Office of Financial Sanctions Implementation (OFSI) had issued warnings about North Korean agents infiltrating businesses as foreign freelance IT workers, a practice that not only breaches sanctions but now poses severe security threats.
MORE: After claims of hacking, Houseparty app offer $1million reward for proof they are being sabotaged
DISCOVER: Dr. Miriam Al Adib lifted the lid on Almendralejo’s AI scandal, and we all need to pay attention
According to Pilling, businesses should adopt rigorous vetting processes, especially for freelance IT hires. OFSI has published several red flags to help identify potential North Korean operatives: inconsistencies in name spelling, vague or conflicting online profiles, reluctance to join video calls, and requests to reroute paychecks through money transfer services. Secureworks also suggests monitoring for unusual access patterns, like re-routing corporate IT equipment or unauthorised remote access attempts.
MORE: My Take on the Taylor Swift Deepfake Scandal and AI Misuse
DISCOVER: Tinder is introducing background checks
This incident has raised awareness of the risks posed by foreign contractors and freelance workers, particularly in sectors relying heavily on third-party IT services. Companies are advised to stay alert, with robust monitoring practices and vigilance in contract-based hiring to avoid becoming the next target of cyber extortion.
Some of the products and services featured in this article may be from our affiliate partners, which means we may earn a small commission if you make a purchase through these links — at no extra cost to you. Our editorial team only spotlights what we genuinely love and think you will, too.
11 responses to “North Korean Hacker Infiltrates Company Posing as Contractor, Demands Ransom”
-
… [Trackback]
[…] There you can find 58281 additional Info on that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Find More to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] There you can find 53132 additional Information to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] There you can find 42646 additional Information on that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Read More Information here to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] There you will find 86014 additional Info on that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Find More Info here on that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Read More to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Read More here to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Read More Information here to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
-
… [Trackback]
[…] Find More here to that Topic: themodems.com/tech/north-korean-cybercriminal-hacks-company-demands-ransom/ […]
Leave a Comment