
The intelligence was released by the publication Bloomberg, referencing the organization’s Director of Security, Stephen Schmidt. One of the “fake employees” worked for the company as a remote system administrator from the USA and was caught due to key press delays. He responded with a metric in tens of milliseconds, which is too slow for such a role.
The security service investigation revealed that operators from the DPRK used the issued laptop. They attempted to infiltrate the Amazon system via a device in Arizona. A US citizen assisted them and had previously been sentenced to several years in prison for similar attempts.
Schmidt noted that North Korean IT specialists frequently try to penetrate US corporations. Amazon reported that since April 2024, they managed to prevent over 1.8 thousand instances where individuals from the DPRK attempted to gain employment using borrowed credentials. Staff members join the organization and subsequently engage in espionage or sabotage of certain projects. However, this is just the tip of the iceberg. And espionage attempts are attributed not only to the DPRK but also to other nations.