home.social

#identityfraud — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #identityfraud, aggregated by home.social.

  1. 🇰🇵 300+ Fortune 500 companies hired a North Korean engineer.

    None of them knew it at the time.

    In 2024-2025, DPRK operators used stolen US identities, AI-modified avatars and real-time#Deepfake interviews to infiltrate Fortune 500 and mid-market tech companies.

    → Stolen US identity + AI-generated profile
    → Live #AI assisted interview manipulation
    → Domestic facilitator handling onboarding
    → Corporate laptop sent to a US “laptop farm”
    → KVM/VPN tunnel from Pyongyang via Russian or Chinese relays
    → Salaries redirected through facilitator accounts → ~90% skimmed to the DPRK regime

    More than 300 companies impacted. Estimated revenue stream: ~$600M/year.

    Funds allegedly routed to DPRK Bureau 39 and the ballistic missile programme.

    $17.8M traced in facilitator accounts in the Christina Chapman case alone. Detection took months, not minutes. Traditional monitoring and standard #SOC visibility would likely not have detected the operation. Mandiant tracks the cluster as #UNC5267.

    This is no longer simple cybercrime. It is state-sponsored infiltration blending #CyberSecurity, #IdentityFraud, #OSINT, remote work infrastructure abuse and AI-powered social engineering.

    The future of #CTI and insider-threat detection is already here.

    cidu.io/articles/dprk-it-worke

    #NorthKorea #DPRK #CyberThreatIntelligence #CyberEspionage #CyberWarfare #Infosec #BlueTeam #ThreatIntel #Geopolitics #RemoteWork #VPN #KVM #Fortune500

  2. 🇰🇵 300+ Fortune 500 companies hired a North Korean engineer.

    None of them knew it at the time.

    In 2024-2025, DPRK operators used stolen US identities, AI-modified avatars and real-time#Deepfake interviews to infiltrate Fortune 500 and mid-market tech companies.

    → Stolen US identity + AI-generated profile
    → Live #AI assisted interview manipulation
    → Domestic facilitator handling onboarding
    → Corporate laptop sent to a US “laptop farm”
    → KVM/VPN tunnel from Pyongyang via Russian or Chinese relays
    → Salaries redirected through facilitator accounts → ~90% skimmed to the DPRK regime

    More than 300 companies impacted. Estimated revenue stream: ~$600M/year.

    Funds allegedly routed to DPRK Bureau 39 and the ballistic missile programme.

    $17.8M traced in facilitator accounts in the Christina Chapman case alone. Detection took months, not minutes. Traditional monitoring and standard #SOC visibility would likely not have detected the operation. Mandiant tracks the cluster as #UNC5267.

    This is no longer simple cybercrime. It is state-sponsored infiltration blending #CyberSecurity, #IdentityFraud, #OSINT, remote work infrastructure abuse and AI-powered social engineering.

    The future of #CTI and insider-threat detection is already here.

    cidu.io/articles/dprk-it-worke

    #NorthKorea #DPRK #CyberThreatIntelligence #CyberEspionage #CyberWarfare #Infosec #BlueTeam #ThreatIntel #Geopolitics #RemoteWork #VPN #KVM #Fortune500

  3. US Nationals Jailed for Aiding DPRK IT Workers in Large-Scale Fraud Scheme

    Two US nationals have been jailed for helping North Korean IT workers impersonate American residents and land remote jobs at over 100 companies, including many Fortune 500 firms, in a massive fraud scheme that raises serious questions about remote hiring practices. This brazen case exposes vulnerabilities in verifying remote…

    osintsights.com/us-nationals-j

    #RemoteItWorkers #NorthKorea #Dprk #IdentityFraud #EmploymentScams

  4. Unemployment benefit fraud remains a high-impact identity theft vector.

    Threat model:
    • Compromised SSNs
    • Fraudulent unemployment filings
    • Downstream tax fraud risk
    • Potential wage garnishment exposure

    Mitigation workflow:
    – Immediate employer notification
    – State agency reporting
    – FTC complaint filing
    – Credit freeze across all three bureaus
    – Continuous credit monitoring
    – IRS Identity Protection PIN enrollment

    Key takeaway: Administrative fraud often precedes financial fraud. Early reporting limits lateral exploitation.

    From a security governance perspective, how should agencies strengthen identity verification in unemployment systems?

    Source: consumer.ftc.gov/consumer-aler?

    Engage below.
    Follow @technadu for structured infosec reporting.

    #Infosec #IdentityFraud #CyberRisk #DataProtection #SecurityAwareness #FraudMitigation #TechNadu

  5. A ₹7.15 crore income tax notice sent to a daily-wage labourer in Uttar Pradesh has sparked shock and suspicion of identity misuse. Here’s what different I-T notices mean and how taxpayers should respond. english.mathrubhumi.com/news/m #IncomeTaxNotice #UttarPradesh #TaxAwareness #IdentityFraud

  6. झारखंड में आधार कार्ड घोटाला!

    झारखंड में आधार कार्ड घोटाला! | Jharkhand Aadhaar Scam | Sahibganj Aadhaar Fraud| Pakur Aadhaar Irregularities| Fake Aadhaar Cards | Follow us for more local news and updates: 👉 YouTube: 👉 Facebook: 👉 Instagram: 🌐 Website: #jharkhand #aadhaar #aadhaarscam #sahibganj #pakur #csc #commonsservicecenter #identityfraud #governance #illegalactivities #datamanipulation #indianews #securityconcern #bangladeshiinfiltration #investigation

    idtvindradhanush.com/videos/%e

  7. FBI seizes domains tied to network selling fake US ID templates online. Bangladesh-based operator made $2.9M from over 1,400 buyers.

    Read: hackread.com/fbi-seizes-domain

    #FBI #Cybercrime #CyberSecurity #IdentityFraud #Bangladesh

  8. FBI seizes domains tied to network selling fake US ID templates online. Bangladesh-based operator made $2.9M from over 1,400 buyers.

    Read: hackread.com/fbi-seizes-domain

    #FBI #Cybercrime #CyberSecurity #IdentityFraud #Bangladesh

  9. German authorities arrested a 36-year-old individual accused of operating a prolonged forged-ID scheme, reportedly selling customizable documents for crypto. Searches across seven states uncovered blank ID stock, engraving tools, counterfeit elements, and user datasets indicating more buyers.

    Interesting case study on how traditional forgery techniques intersect with online platforms and digital anonymity.

    What safeguards do you think the industry should prioritize?
    Follow us for more cybersecurity insights.

    Source: mainwelle.de/mutmasslicher-aus

    #CyberSecurity #ThreatIntel #IdentityFraud #InfoSec #OSINT #CyberCrime #TechNadu

  10. For my fellow #sysadmin and #cyberSecurity people, this is a real problem (article at bottom). No matter how secure the web interface and back-end of a system is, you can never properly secure third party systems that interact with your back end. Note the third party factor. Sure you could provide libraries and secure interfaces, but one typo and poof* there goes system security.

    cbc.ca/newsinteractives/featur
    #identityFraud #softwareDevelopment #security #softwareEngineering #banking

  11. For my fellow #sysadmin and #cyberSecurity people, this is a real problem (article at bottom). No matter how secure the web interface and back-end of a system is, you can never properly secure third party systems that interact with your back end. Note the third party factor. Sure you could provide libraries and secure interfaces, but one typo and poof* there goes system security.

    cbc.ca/newsinteractives/featur
    #identityFraud #softwareDevelopment #security #softwareEngineering #banking

  12. @yacc143 @davidhaller @Nonya_Bidniss @BNetzA @bsi

    There's a reason why "online identification" is being done by dedicaded and certified providers and even those don't archive said records beyond the successful verification process, as it's trivial to commit #IdentityFraud with said data.
    youtube.com/watch?v=n783UbAkBA

  13. "The cases that have come to the attention of the media & have therefore become sort of nationally known are only the tip of the iceberg. There are thousands of people who are #claiming an #Indigenous #identity and I would say most of them, a lot of them are #illegitimate ” Teillet said. “According to professor Darryl Leroux, we’re talking over 100,000 people.”
    globalnews.ca/news/9607344/cal

    #Fraud #NativeMastodon #pretendian #fraud #FalseClaims #Misappropriation #NativeCanada #IdentityFraud #Canada

  14. The #president of a #Canadian #university has #apologized & is taking a #LeaveOfAbsence after #allegations that she #falsely #claimed to be #Indigenous, in the latest #highProfile case of apparent #cultural #IdentityFraud .

    Vianne Timmons, who is president of #MemorialUniversity of #Newfoundland , said that she would be taking a six-week leave after the #CBC published a report last week questioning her claims that her father’s great-great-grandmother was #Mikmaq .

    amp.theguardian.com/world/2023

  15. Forced to confront the truth... "UBC regrets handling of Turpel-Lafond, as she loses honour at different university"

    "[UBC] says it won’t offer further comment on Turpel-Lafond’s case, but that it broadly condemns #Indigenous #identityfraud."

    "#UBC, where #TurpelLafond was a tenured law professor and served as director of the Indian Residential School History and Dialogue Centre, announced this month she was no longer with the university as of Dec. 16."

    thestar.com/politics/2023/01/1

  16. ID.me lied to IRS about unemployment fraud, average wait times, House Dems say - Enlarge / House Oversight Committee Chair Rep. Carolyn Maloney (D-NY) i... - arstechnica.com/?p=1899025 #digitalidentity #onlineidentity #identityfraud #covid-19 #policy #id.me

  17. ID.me lied to IRS about unemployment fraud, average wait times, House Dems say - Enlarge / House Oversight Committee Chair Rep. Carolyn Maloney (D-NY) i... - arstechnica.com/?p=1899025 #digitalidentity #onlineidentity #identityfraud #covid-19 #policy #id.me