Leak Reveals the Workaday Lives of North Korean IT Scammers

The tables show the potential target tasks for IT staff. A sheet, which apparently includes daily updates, listed job details (“a new response and web 3 developer need”), companies advertise them and their locations. It is also a detailed contact details of those who contact freelance websites or contact the vacancies. A “status” column says that they are “waiting” or “contact”.

Screenshots of a spreadsheet seen by the wired seem to listen to IT workers’ own real-world names. Each name has an article on the computer’s make and model as well as they have, as well as monitors, hard drives and serial numbers for each device. “Master Boss”, whose name is not listed, is probably using 34 inch monitors and two 500GB hard drives.

A “analysis” page seen by the protective researcher Stick is seen on the page that the fraud team is involved: AI, blockchain, web scraping, bot development, mobile applications and web development, trading, CMS development, desktop app development and “others”. Each category is listed in a potential budget and contains a “total given” field. A dozen graphs in a spreadsheet claims how much they have paid, the most profitable zone for making money and the weekly, monthly, or the most successful of paying as a certain amount is to track.

Michael “Bernie” Bernhart says “it has been professionally driven” North Korea hacking and threatened researchers K Insider works for DTX, a threat to the threat. “Everyone has to make their quota. Everything needs to be noticed everything about everything,” he said. Researcher also added that he has seen the same kind of records in line with North Korea’s sophisticated Hacking groupWhich has stolen billions of cryptocurrency in recent years and is largely different from the IT labor projects. Bernhart has seen the data obtained by Stick and says it is overlap with what he and other researchers are tracking.

“I think this information is very real,” the Unit of the Cybercquirement Agency Palo Alto Networks 42 Humpty Detective team adviser Ivan Gordencker, who has also seen the data obtained by Static. Gordencar says the firm was tracking multiple accounts on the data and one of the prominent Githab accounts publicly published IT workers’ files publicly. None of the DPRK-linked email addresses did not respond to Ward’s requests to comment.

Githab has removed the three developer accounts after contact with the cable, saying with the head of the cyberquacy and online protection agency, Raj Loud, that they have been postponed by adjusting their “Spam and inhuman activities” rules. Loud says, “The incidence of threat of this national nation-state is an industrialized challenge and a complex problem that we take seriously,” Loud said.

Google has refused to comment on the specific accounts provided by quoting the privacy and security policies of security. “We have processes and principles to identify these operations and report them to law enforcement,” said Mike Sino, director of Google Identification and Reaction. “These processes include taking action against fraudulent activity, actively notifying target companies, and working with public and private partnerships to share threatening intelligence that strengthens the defense against these promotions.”