Spur has published a list of some 2,400+ IP addresses it sees being used (currently) by North Korean hackers posing as people applying for IT jobs in American and European companies.
-
Spur has published a list of some 2,400+ IP addresses it sees being used (currently) by North Korean hackers posing as people applying for IT jobs in American and European companies.
https://spur.us/astrill-vpn-and-remote-worker-fraud/
"Recently, various intelligence and threat analysis teams have identified a concerning trend: North Korean state actors are infiltrating companies and organizations around the world in an attempt to facilitate the clandestine transfer of funds to support North Korea’s state apparatus. Specifically, these actors have favored the use of Astrill VPN to obscure their digital footprints while applying for remote positions."
"While it’s been several months since these articles were published, we continue to see reports from our customers of fraudulent remote worker campaigns originating from Astrill VPN IP addresses."
https://storage.googleapis.com/spur-astrill-vpn/astrill_vpn_ips_december_2024.txt
If your new IT employee suddenly is unreachable, you might have a problem.
-
R [email protected] shared this topic
