KnowBe4 mistakenly hires North Korean hacker, faces infostealer attack

Comments

• octopus_ink@lemmy.ml ⁨3⁩ ⁨months⁩ ago

  It’s a little bit ironic to me that the security company formerly run by the man who literally wrote the book on social engineering may have fallen victim to a social engineering attack.

  source

  • Evotech@lemmy.world ⁨3⁩ ⁨months⁩ ago

    And makes it’s living on telling other companies how to increase their security posture

    source

    • cheese_greater@lemmy.world ⁨3⁩ ⁨months⁩ ago

      The grift has come fulk circle

      source
  • radivojevic@discuss.online ⁨3⁩ ⁨months⁩ ago

    We learn more lessons by failing than succeeding.

    source

    • octopus_ink@lemmy.ml ⁨3⁩ ⁨months⁩ ago

      True, but Kevin certainly had his share of both.

      source
• GildorInglorion@lemmy.world ⁨3⁩ ⁨months⁩ ago

  (blog.knowbe4.com/how-a-north-korean-fake-it-worke…) They are saying they caught the guy before he had access to anything important.

  source

  • Landless2029@lemmy.world ⁨3⁩ ⁨months⁩ ago

    He made it though onboarding and got a company laptop with creds. Got flagged by SEC because he got malware day 1. Also they dug in and he was connected to the states with a VPN.

    source
• AlternateRoute@lemmy.ca ⁨3⁩ ⁨months⁩ ago

  This report makes it sound like they had a video call with camera on, vs other reports where they recommend people have camera on because they didn’t

  also used AI tools to create a profile picture and match that face during the video conference calls.

  This doesn’t sounds like the video was on / faked only that they had a call where the profile picture was used.

  source
• YeetPics@mander.xyz ⁨3⁩ ⁨months⁩ ago

  Boy, I bet the (drumroll) KnewBe4

  source