Researchers set up a fake start-up company to study fraudulent North Korean IT workers.
Studying Fraudulent North Korean IT Workers
About this summary. This is a short excerpt from the description that Schneier on Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.schneier.com/blog/archives/2026/10/studying-fraudulent-north-korean-it-workers.html
Source attribution: headline and facts are from Schneier on Security (schneier.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
US sanctions Russians, North Koreans for laundering IT worker earnings
The U.S. Treasury Department sanctioned Russian and North Korean nationals for allegedly laundering the earnings of illicit IT workers on behalf of Pyongyang.
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea…
U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog. The U.S.
What We Missed: Feds Lasso Texas Laptop Farms
In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in "Operation…
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
A new bipartisan House bill would charge the federal government with developing formal guidance for defending AI models against distillation attacks. The AI Cyber…
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware.