4 ms·

Am I reading this right? They're in the U.S. somewhere? How did they get into the country? Do we still think low border security is a good idea?

alephnerd 11mo ago
> They're in the U.S. somewhere Nope. UAE or Laos: "The men speak English and Korean and have ties to the United Arab Emirates and Laos"
foxyv 11mo ago
Essentially, they steal US social security numbers or ITINs from leaked identities to apply for jobs in the US as US citizens. They then make money for prohibited countries like North Korea while pretending to be that citizen. The mony is exfiltrated through cryptocurrency or money mules. In the meantime they install malware and steal anything that isn't nailed down. Passwords, keys, proprietary documents, cryptocurrency, etc... Edit: They also recruit US Citizens through "Work from home" schemes to help them engage in the fraud.
- suburban_strike 11mo ago
  Can confirm, we're dealing with one right now. They coast for a while on passable work but it isn't sustained through multiple warnings. The day after we hit him with a PIP he performed a mass exfiltration. Two weeks after we let him go, systems he had previously had access to were compromised from outside. With remote workers, if they start underperforming, start revoking whatever access you can at the first warning. Most of the events were set in motion once he saw the writing on the wall. This one was a textbook case with such predictable timing it's absurd that he got as far as he did. He also raised every red flag in the book during the hiring process (interviewers noted suspicions of AI use) and presented as too good to be true with perfect skills alignment and low salary requirements. At every point in the process we knew better.
Kolonie 11mo ago
Seems like you didn't read it right.. The trouble with border security is that it is a very expensive way to get a misplaced sense of security.
platevoltage 11mo ago
The majority of people in the country without documented status entered legally.

alephnerd 11mo ago

> They're in the U.S. somewhere Nope. UAE or Laos: "The men speak English and Korean and have ties to the United Arab Emirates and Laos"

foxyv 11mo ago

Essentially, they steal US social security numbers or ITINs from leaked identities to apply for jobs in the US as US citizens. They then make money for prohibited countries like North Korea while pretending to be that citizen. The mony is exfiltrated through cryptocurrency or money mules. In the meantime they install malware and steal anything that isn't nailed down. Passwords, keys, proprietary documents, cryptocurrency, etc... Edit: They also recruit US Citizens through "Work from home" schemes to help them engage in the fraud.

suburban_strike 11mo ago
Can confirm, we're dealing with one right now. They coast for a while on passable work but it isn't sustained through multiple warnings. The day after we hit him with a PIP he performed a mass exfiltration. Two weeks after we let him go, systems he had previously had access to were compromised from outside. With remote workers, if they start underperforming, start revoking whatever access you can at the first warning. Most of the events were set in motion once he saw the writing on the wall. This one was a textbook case with such predictable timing it's absurd that he got as far as he did. He also raised every red flag in the book during the hiring process (interviewers noted suspicions of AI use) and presented as too good to be true with perfect skills alignment and low salary requirements. At every point in the process we knew better.

Kolonie 11mo ago

Seems like you didn't read it right.. The trouble with border security is that it is a very expensive way to get a misplaced sense of security.

platevoltage 11mo ago

The majority of people in the country without documented status entered legally.