This talk is part of a two-presentation session running from 1:30 PM - 2:20 PM. The session will feature two presentations back-to-back, with Q&A after each presentation.

Nisos OSINT investigators found probable DPRK IT workers attempting to gain employment while posing as non-North Korean nationals. Most DPRK IT workers support North Korean leader Kim Jong Un's regime and are involved in activities that violate US and UN sanctions. In this presentation, we will discuss the investigative techniques used to identify the hallmarks of this activity, share the methods we are using to continue to build out the network of fraudulent actors, and explore the difficulties that companies face in verifying the legitimacy of remote workers' skills and experiences. We will also provide insights into potential countermeasures that companies and authorities can take to detect and prevent this activity and suggest partnerships that can aid the T&S community to combat similar behavior.