North Korean 'fake worker' scheme caught live on camera

• Researchers tricked North Korean hackers running a fake job campaign
• They were tricked into using a sandbox they thought was a legitimate laptop
• This gives valuable insight into their tactics.

An investigation run by BCA Ltd founder, Mauro Eldritch, in partnership with Northscan and ANY.RUN has observed the infamous Lazarus group in one of its most notorious schemes - the ‘malicious interview’ campaign. Within this scheme, workers from the DPRK aim to trick legitimate recruiters into hiring them for high-profile companies - a position they can use to carry out malicious activities.

Researchers from this intelligence gathering operation were able to trap the hackers with what hackers believed were ‘real developer laptops’ - but were actually remotely controlled sandbox environments belonging to ANY.RUN.

During the most recently observed campaign, hackers recruited genuine engineers to act as a front man for them, offering between 20% and 30% of the ...