5h fa
North Korean operatives infiltrate crypto hiring pipeline, captured on live surveillance
Security researchers captured North Korean operatives in real time after deploying a honeypot workstation that mimicked a developer environment. The operatives, linked to the Lazarus Group's Famous Chollima division, used legitimate AI hiring tools and cloud services to establish trusted insider access rather than exploit code vulnerabilities. The operation revealed systematic use of job-automation software, VPN masking, and persistent remote-access protocols to bypass corporate security measures.