North Korea uses remote IT worker to clandestinely earn NZ currency
3 hours ago
- North Korea used a remote IT worker with fake identity documents to infiltrate a New Zealand business and earn foreign currency.
- The National Cyber Security Centre (NCSC) labeled this a 'new' threat in a rapidly evolving cyber landscape.
- The worker threatened to release commercially sensitive information if not paid, putting the company at risk of breaching UN sanctions.
- Warning signs include requests for cryptocurrency payment, refusal to attend video meetings, and unusual working hours.
- State-sponsored cyber threats from China, Russia, Iran, and North Korea are linked to nearly a quarter of incidents.
- Advanced AI models, including 'agentic AI' that can act autonomously, are expected to pose a major threat by early next year.
- Social engineering via online collaboration platforms is another growing vector, with a case involving a fake helpdesk call on Microsoft Teams.
- A government summit will test core agencies against minimum cyber security standards, with a push for centralized IT adoption to improve security.