[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:researchers-built-a-fake-crypto-startup-and-hired-three-suspected-north-korean-i-msq3rd1y":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":12,"action_required":17,"article_ids":18,"ioc_summary":20,"source_urls":21,"status":23,"expires_at":24,"created_at":25,"updated_at":26,"articles":27},"e2aac9a5-83a4-4d78-b770-c0422b097e79","Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers","researchers-built-a-fake-crypto-startup-and-hired-three-suspected-north-korean-i-msq3rd1y","North Korean state-sponsored operatives are actively infiltrating foreign tech companies by applying for legitimate developer roles, likely to establish persistent access for espionage or financial theft. This threat targets any organization hiring remote developers, particularly in crypto, fintech, and high-value tech sectors. If hired, these operatives gain internal network access and can establish command and control infrastructure.","high","advisory",[],[13,14,15,16],"Google Gemini","Chrome Remote Desktop","AIApply","Final Round AI","Implement enhanced vetting for remote developer hires: verify employment history through independent channels, conduct video interviews requiring real-time technical problem solving, monitor new developer accounts for suspicious behavior during onboarding including unusual file access patterns and lateral movement attempts.",[19],"97281aa0-7d24-4b56-acb0-c2ddb3f181f6",null,[22],"https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fresearchers-built-fake-crypto-startup.html","archived","2026-08-14T13:05:48.157+00:00","2026-08-12T13:05:51.839072+00:00","2026-08-14T14:06:15.700835+00:00",[28],{"id":19,"title":6,"url":22}]