NorthScan
@north_scan
Investigating North Korean IT Worker Infiltration
Driven by OSINT & HUMINT | Founded by @0xfigo
๊ฐ์
May 2021
59 ํ๋ก์ ์ค 238 ํฌ
๐ฅ New investigation out
We went undercover to investigate the Famous Chollima / DPRK IT worker scheme by creating a fake startup and hiring remote workers connected to the operation
Working with @BirminghamCyber and @ANYRUN_app, we were able to observe their activity firsthand and capture weeks of real-world activity inside the environment
Full story ๐
๋ ๋ณด๊ธฐ
๐ฅ We โhiredโ Lazarus APT remote workers โ and uncovered their toolkit.
@BirminghamCyber & @north_scan used #ANYRUN# Sandbox to capture weeks of Famous Chollima activity inside a fake startup.
๐ How not to let a spy in? See full story and videos:
๋ ๋ณด๊ธฐ
