How North Korea Turns Job Interviews into Cyber Traps
Data Strategy, Security & Privacy attorney Matthew Welling was featured in a Voice of America (VOA) article talking about how a North Korean hacking group known as WaterPlum is using fake job interviews to install malware on software developers' computers. Posing as recruiters for artificial intelligence (AI) and cryptocurrency companies, the hackers ask applicants to run malicious files disguised as coding tests, which gives them access to cryptocurrency wallets, personal identity documents and company systems. Matthew told VOA the harm can extend beyond an individual when a compromised computer provides a pathway into an employer's or client's network.
"Liability can also arise under various contracts or other regulations. These risks are not isolated but can compound simultaneously," he said. "Companies can suffer multiple potential damages all at once, including contractual liability, reputational damage and the exposure of systems, intellectual assets and other information."