Check Point Research
21st October – Threat Intelligence Report · 2024-10-21
Researchers have uncovered that North Korean IT workers, who infiltrate Western companies by using fake identities, are now extorting their former employers by stealing sensitive data and demanding ransom. These workers, often hired as contractors, leverage tools like VPNs and remote desktop applications to mask their locations. After their employment is terminated, they send extortion emails threatening to leak the stolen data unless paid in cryptocurrency.