"If you put an 'Asian face' on that profile, you'll never get a job." He would then use those borrowed identities to approach people in Western Europe for their identities, which he'd use to apply for jobs in the US and Europe. Jin-su often found success targeting UK citizens.
"With a little bit of chat, people in the UK passed on their identities so easily," he said.
Interesting. I was under the impression that most large employers perform basic background checks on new employees?
yes background check is done on UK person's identity and then Jin-su shows up to the job.
This is a happening a lot for regular tech jobs. Person who interviews and person who shows up for job are completely different ppl. we had to start taking screenshots of faces in interview so we can compare. This is happening big time.
I‘ve always simply ignored these.
Is there a better way?
Military/government jobs with secret data have their own, through clearance checks of course, but a random IT company would never have this.
On the other hand, you have to submit so many tax, social security, insurance-related IDs which are cross-checked, I don't think it's feasible to impersonate someone here. It's also a reason why over-employment is not possible.
Also only having to give 85% to the regime seems pretty weird to me, it’d seem more logical to give 100% to the regime and have them provide the workers with a very cheap bed and food
Also, I tend to think that maintaining these interactions going might be a way to let more information into Naughty Korea and might actually have a positive influence in the long run.
That's why there's no one industry or types of businesses being targeted, it's anywhere they can get hired. If your a high profile target, that's a bonus not the original goal.
Hiring mischievous North Koreans is fully in line with your CIO's new priorities, which she heard about at a conference once.
Probably got lucky otherwise I would have no work myself because I think the client isn't that rich, they would go out of business from ransomware attack
you’re hiring an engineer thousands of miles away in another country for a fraction of the cost of an American engineer and you just assume they can be trusted with access to your most sensitive data and systems? And that they even are who they say they are and not just a frontman for some cabal?
You know that the North Korean is untrustworthy, but that's kind of a special case. Is a random American more trustworthy than a random Bangladeshi or Slovakian?
I suppose that you have a bit more ability to do background checks on US citizens. But those background checks aren't so great, either.
1. background checks 2. more ability to meet face to face. 3. ability to go after them for wrongdoing (either civil cases or chances of getting the police to follow up on anything criminal.
The only way to prevent this is to do in-person only, but that's another can of worms.
Heh, maybe we need to make a 2FA device with biometrics and GPS, where it's setup in person the first time.
if all you do everyday is interview, you obviously get great at it
