Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

Security researchers created a fake cryptocurrency startup and posted job ads for developers, which led to the hiring of three individuals suspected of being North Korean operatives. The researchers monitored the hires' activities by issuing virtual machines that recorded their actions. The hiring process revealed inconsistencies in the personal details provided by the new employees. One of the hires initially claimed to reside in Pasadena, Texas, but later provided a California driver's license and a New York bank account, raising suspicions about their true identities. The onboarding paperwork was used to gather more information about the suspected operatives. The experiment allowed researchers to gather intelligence on the tactics and behaviors of the suspected North Korean IT workers.