The FBI raided 40+ homes in Texas running laptop farms for North Korean IT workers. Every check a company runs said "US employee at home": a residential US IP, the company's own laptop, mainstream remote access tools.

The only fake part was the person. We also started labelling those remote access tools properly in our API.

Reputation Radar #16:
https://www.reput.io/blog/reputation-radar-16

#ThreatIntel #NorthKorea #SOC