North Korea lures engineers to rent identities in fake IT worker scheme

Published on December 2, 2025

In an unprecedented intelligence operation, security researchers exposed how North Korean IT recruiters target and lure developers into renting their identities for illicit fundraising. [...]

Continue reading on website
Other news

Google fixes two Android zero days exploited in attacks, 107 flaws

December 2, 2025
Google has released the December 2025 Android security bulletin, addressing 107 vulnerabilities, including two flaws actively exploited in targeted attacks. [...]

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

December 2, 2025
The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks like Flutter, React, Tailwind, Vim, and Vue.GlassWorm was first documented in October 2025, detailing its use of the Solana blockchain for command-and-control (C2) and harvest npm,