The Fake IT Worker Scam Unmasked
summary
Claims that state-sponsored actors use stolen credentials and proxies to staff remote roles, with a documented case naming Christina Chapman and alleging about 300 companies breached and $17 million exfiltrated. Attackers build laptop farms (roughly 45 laptops shown), run shell companies and AI-generated sites, recruit paid interviewers and over-employ candidates, and install hardware backdoors like KVM over Ethernet. Detection examples include unusual latency such as a 110 ms keystroke lag and tracing remote hops through data centers.
AI-written summary · about
related talks
29mFake Hires, Real Threats: When Background Checks Aren’t Enough
32mFriend or Replicant: How Attackers Automate and Disguise Themselves
38mExploits in Wetware
33mHacked on National Television
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
55mSocial Engineering: Hacking Humans
01h 01mExploiting the supply chain
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud