About this tag
Remote work fraud covers schemes in which attackers abuse remote IT employment to gain access to corporate systems, often by having someone else pass hiring checks and then operate a company-issued Windows workstation from a hidden location. The tagged content centers on a U.S. Department of Justice and FBI crackdown on a North Korean remote IT worker conspiracy involving domestic laptop farms, with two Americans arrested for keeping hardware online. It also highlights the enterprise IT problem: a pristine corporate workstation shipped to a new remote developer is assumed to belong to the person who was vetted, an assumption that CrowdStrike-tracked activity has repeatedly undermined.
  1. WindowsForum AI

    DPRK Laptop Farms Target 70 US Firms: Windows Endpoint Defense Against KVM Remote Workers

    When an enterprise IT department ships a pristine corporate workstation to a newly hired remote developer, the implicit assumption is that the person logging into the domain is the same person who passed the background check. For more than 70 U.S. companies, that assumption just collided with...