ZachXBT exposes North Korean IT employees using 30 fake identifications on development platforms.

2025-08-13 18:01:35

Abstract generation in progress

Blockchain investigator ZachXBT has revealed a campaign by a group of North Korean programmers infiltrating Western tech companies through remote programming positions. The source infiltrated a member’s device, revealing how the group illegally purchased social security numbers, Upwork accounts, LinkedIn, rented computers, and used AnyDesk to work.

They create fake identities with detailed profiles, use Google to manage schedules, tasks, budgets, and communicate in English. The group’s cryptocurrency wallet is related to the Favrr hack worth 680,000 USD in June 2025.

Although not very sophisticated, the group operates persistently, using AI, VPNs, and proxies to maintain their cover. ZachXBT warns of the difficulties in dealing with this due to the lack of coordination among platforms and the complacency of employers, while also stating that this is just one of hundreds of similar groups.

TRA-1,04%

CHO-0,57%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.