How not to hire a North Korean plant posing as a techie

Here is my opinion as someone who worked with alongside North Koreans (textile factory) and visited NK. I am from East Europe and have 10 years in IT.<p>- NK secret service (or whatever you call it) is more sophisticated than this. They will act as proper company from Turkey, India, China or even EU countries...<p>- if you actually manage to get some North Korean who escaped to West, they are 10x more dedicated than anyone else. China, or South Korea (usual target countries) do not offer many opportunities, they need money for relatives.<p>- NK secret services do not attack west infrastructure, or steal info from small fish. They are too small to do that! Most money is from drugs and guns.<p>- if you hire US only, you eliminate 99.99% of issues. US borders are not ideal, but they do repeal unwanted Asians.<p>Edit: * stitching, working with cloth, it was textile factory in East Europe

&gt;Evading in-person meetings or requests for drug tests.<p>I am surprised about the request for drug tests. Is this common in the US?<p>Except for high-security jobs, which are never possible remotely anyway, I have never heard of a client or employer asking for a drug test. If I got a request for a drug test, I would quit immediately. Even if I am sure it is negative, my private life is my business. Any attempt to control my private life I see as a personal attack.

&gt; Threats to release proprietary source codes if additional payments are not made;<p>This is &quot;a sign&quot;? In what company is that not grounds for immediate revocation of all access, termination?

Original source: <a href="https:&#x2F;&#x2F;www.ic3.gov&#x2F;Media&#x2F;Y2023&#x2F;PSA231018" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.ic3.gov&#x2F;Media&#x2F;Y2023&#x2F;PSA231018</a>

&gt; logging in from multiple IP addresses,<p>[x] Phone, laptop.<p>&gt; working odd hours,<p>[x] Delayed sleep phase insomnia.<p>&gt; Repeated requests for prepayment followed by “anger or aggression when the request is denied”;<p>[x] Previously ripped off by shitty employers.<p>&gt; Evading in-person meetings or requests for drug tests;<p>[x] Social anxiety, medical cannabis user who is aware that even though legal (in AU) it is stigmatised.<p>&gt; Having multiple online profiles for the same identity with different pictures, or online profiles with no picture.<p>[x] Average privacy enthusiast.<p>I await further instructions from Glorious Leader.

I&#x27;m amazed that the &quot;alt-detection&quot; problem from multiplayer games has become a business problem. I guess the US gov has been doing this for decades for security clearances, is there a commercial equivalent that works internationally?<p>And there&#x27;s still the &quot;man-in-the-middle&quot; problem.

&gt; Evading in-person meetings or requests for drug tests<p>Why would they evade drug tests and meeting in person? Do the &quot;techies&quot; claim they are not Korean at all? Surely, a North Korean would pass as a South Korean to (at least) any non-Korean colleague?

A lot of the advice seems to boil down to &quot;don&#x27;t hire remote freelancers.&quot;

Wouldn’t throwing tantrums and threatening to violate NDAs over petty cash just undermine their entire spying operation?

This reads like blatant fear mongering<p>&gt; infiltrate organizations they work for to steal secrets<p>Do you worry about this as a random company? You are gonna steal source code for 4 out of 12 micro services required to run some random online shopping website, or a video game? what is North Korean gov. Going to do with it?<p>And if you give random people access to customer data, then it’s already being sold on the dark web.<p>&gt; suspicious behavior such as working odd hours and inconsistencies in name spellings<p>every autistic or dyslexic or socially disfynctional techy is a spy now?

The Danish government might want to read this, preferably before having any more North Koreans working on ships for the navy.

&gt; Repeated requests for prepayment; anger or aggression when the request is denied.<p>Why would they ask for prepayment?

&quot;Don&#x27;t let the hoodie fool you, that&#x27;s <i>Pinus densiflora</i>.&quot;

Wish someone would honeypot them all then reverse infect their computers.