- The intelligence group on Google’s threats has identified more threats from the RPDC
- North Korean pirates arise as workers to find a job in Western companies
- This leads to a multitude of security threats to companies
A new Google’s Kene Intelligence Group report has warned of an expansion of the operations of the Democratic People’s Republic of Korea (North Korea).
Researchers say that an increasing number of Western companies accidentally hires North Korean IT workers who collect funds for the regime.
These workers are a threat of serious security for organizations, which are at risk of data, disturbance and spying.
Extortion tactics
This is part of a much broader campaign of the RPDC which saw threat actors sponsored by the state infiltrating dozens of fortune companies 100, which led to up to $ 6.8 million in revenues earned for the RPDC.
This has led the United States Ministry of Justice to arrest several American citizens who directed “laptops of laptops” which are home to American equipment sent to new employees – facilitators have installed remote access technology allowing RPDC workers to connect.
Google has also located facilitators in the United States and the United Kingdom to share sharing equipment, indicating a “complex logistics chain”.
An investigation into the campaign infrastructure has revealed “increased interest in Europe” and a global expansion of RPDC tactics and an increased volume of extortion attempts.
The intelligence group of threats has identified cases where recently dismissed IT workers “threatened to publish the sensitive data of their former employers or to provide them to a competitor”, including owner data and the source code for internal projects.
To fight against this phenomenon, Google reports that many companies exploit a clean BRNT Your system policy, but they often lack traditional safety and journalization tools and make the detection of threats much more difficult, considerably increasing a risk in untempt-detected malicious activity.
“The increase in extortion campaigns has coincided with the application of the United States law increased against IT workers from the RPDC, including disturbances and accusation acts.