Misconfigured cloud server leaked clues of North Korean animation scam

Misconfigured cloud server leaked clues of North Korean animation scam

April 23, 2024 at 01:30AM

A misconfigured cloud server using a North Korean IP address exposed the potential inadvertent hiring of North Korean workers by film production studios like BBC, Amazon, and HBO Max for animation projects. The server, now inactive, was discovered by the NK Internet blog author. The Stimson Center and cybersecurity experts found evidence of potential subcontracting to North Korean animators, highlighting the need for increased vigilance to prevent unwitting support for North Korea.

Based on the meeting notes, the key takeaways are:

1. Misconfigured cloud server with a North Korean IP address discovered allegedly being used by North Korean workers for animation projects for film production studios including the BBC, Amazon, and HBO Max.
2. Evidence suggests a go-between relaying information between production companies and North Korean animators.
3. VPN logins from China and Spain were also identified.
4. Suspected contractor for outsourcing animation work to North Korean animators is Pyongyang-based April 26 Animation Studio.
5. Lack of evidence to suggest that the film production companies had knowledge of subcontracting to North Korean animators.
6. Concerns about North Korean citizens posing as IT workers to earn money for the regime.
7. Warnings issued by the United States against inadvertently supporting Kim Jong Un’s regime through IT work.

These takeaways outline the situation regarding the potential inadvertent hiring of North Korean workers for animation projects and emphasize the need for increased vigilance and due diligence in outsourcing and IT practices.

Full Article