North Korean companies are impersonating US-based IT service providers to advance their economic goals as part of a broader campaign.
See also: North Korean hackers target macOS systems with Flutter apps
North Korea's network of IT workers, both individually and under the cover of companies, is seen as a technique for evading international sanctions imposed on the country and generating illicit revenue.
The global campaign by North Korean IT companies, also tracked as Wagemole by Palo Alto Networks Unit 42, involves using fake identities to obtain employment at various companies in the US and elsewhere and sending a huge portion of their salaries back to North Korea, in an effort to fund weapons of mass destruction (WMD) and ballistic missile programs.
In October 2023, the US government said it seized 17 websites that were masquerading as US-based IT services companies in order to defraud businesses at home and abroad by allowing IT workers to hide their real identity and location when applying online to do remote work.
See also: Hidden Risk: North Korean hackers BlueNoroff target crypto companies
The IT workers were found to be working for two companies based in China and Russia, Yanbian Silverstar Network Technology Co. Ltd. and Volasys Silver Star.
SentinelOne , which analyzed four new North Korean companies by DPRK IT Worker , said they were all registered through NameCheap and claimed to be outsourcing, consulting , and software development companies, while copying their content from legitimate companies.
- Independent Lab LLC (inditechlab[.]com), which copied its website format from a US-based company called Kitrum
- Shenyang Tonywang Technology LTD (tonywangtech[.]com), which copied its website format from a US-based company called Urolime
- Tony WKJ LLC (wkjllc[.]com), which copied its website format from an India-based company called ArohaTech IT Services
- HopanaTech (hopanatech[.]com), which copied its website format from a US-based company called ITechArt
See also: North Korean hackers Andariel attacks are financially motivated
Information technology (IT) companies play a pivotal role in the digital age, delivering innovative solutions and services that impact nearly every aspect of daily life. From software development and cybersecurity to cloud storage and data analytics, IT companies provide the infrastructure and tools that enable businesses and individuals to operate more efficiently and stay connected. As technology continues to evolve, these companies are at the forefront of innovation, shaping the future of work and society.
Source: thehackernews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
