North Korean Hacker Infiltrates US Security Firm Using Stolen Identity
KnowBe4 hired a fake software engineer who attempted to install malware, exposing vulnerabilities in hiring processes.
- The hacker used a stolen US identity and AI-enhanced photo to pass rigorous hiring checks.
- KnowBe4's security team detected suspicious activities shortly after the hacker received the company-issued laptop.
- The hacker's actions included manipulating session history files and transferring harmful files.
- The incident highlights the need for advanced identity verification and continuous security monitoring.
- No data was compromised, and the FBI is investigating the case.