185
How a North Korean Fake IT Worker Tried to Infiltrate Security Awareness Firm KnowBe4
(blog.knowbe4.com)
this post was submitted on 24 Jul 2024
185 points (97.9% liked)
Technology
58303 readers
15 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Hiring somebody without ever physically seeing them is a curious reality
I'm surprised , if the intention has stated, is to work well paid job and place a resource, why load malware at all?
If they're just trying to remote into the device, why are they remoting indirectly to the laptop? Why not use a remote KVM that hooks up to the output and USB ports?
Interesting point about the KVM. To make it transparent the KVM would need to report the model of a real monitor in the display EDID data. Also if you’re monitoring the device, which is almost certainly a laptop, it would be suspicious if it was plugged in to a monitor 100% of the time.
Having a laptop permanently in a dock is pretty normal for tech workers.
Sure, I use a ThunderBolt dock at home, but being docked 100% of the time is probably not normal.
Mine has been docked for months at a time. I recently started shifting it to be near the kids when they're home; but not undocking it wouldn't strike me as strange at all.
That’s fair!