Company Hacked by North Korean Cyber Criminal Post Hiring Mistake

A recent incident has come to light where a company fell victim to a cyber attack after unknowingly hiring a North Korean hacker as a remote IT worker. The hacker managed to infiltrate the company’s network, exfiltrate sensitive data, and then demand a ransom. This firm, based in the UK, US, or Australia, chose to stay anonymous but allowed cyber responders from Secureworks to disclose the incident to raise awareness.

This case is part of a concerning trend where North Korean operatives are masquerading as remote workers in Western companies to bypass sanctions and fund their regime. Companies have been warned about the risks associated with hiring individuals remotely, especially in light of these incidents.

According to Rafe Pilling, the Director of Threat Intelligence at Secureworks, this escalation in fraudulent schemes poses a significant threat to companies. North Korean operatives are no longer just seeking a steady income but are now engaging in data theft and extortion for higher sums.

This incident is not an isolated one, as another North Korean IT worker was recently caught attempting to hack their employer. KnowBe4, a cybersecurity company, managed to detect and disable the hacker’s access to their systems promptly.

Employers are advised to exercise caution when hiring remote workers, conduct thorough background checks, and remain vigilant for any suspicious behavior. With the rise of sophisticated cyber attacks, companies must prioritize cybersecurity measures to safeguard their assets and protect against potential threats.