| ▲ | pluc 3 days ago |
| Have you gotten the "hey, wanna be a North Korean proxy?" offer yet? |
|
| ▲ | Esophagus4 3 days ago | parent | next [-] |
| Does that happen?? I’ve always been curious how those things go down |
| |
| ▲ | trinix912 3 days ago | parent | next [-] | | They say they're a software developer from a poor country looking for someone willing to leave their laptop on overnight for a 50% split of the paycheck. I got one a long time ago, they even mentioned they need help because their can't do the work from an IP of their country. Needless to say I just trashed the email and only figured out it was one of those after reading about the NK employee scandal on here. | | |
| ▲ | goolz 3 days ago | parent | next [-] | | Yep! They are rampant on Upwork. You could probably find a cell of them in a day if you wanted, just go looking for jobs with the 'crypto' tag, haha. They have offered me serious sums of money to "simply install RDP and give us access to your network". I imagine people desperate enough take them up on it too. | | |
| ▲ | isoprophlex 3 days ago | parent [-] | | That... sounds lucrative, and exciting? Use an isolated network, snoop on what device is doing, learn a thing or two about what these threat actors are doing? | | |
| ▲ | rl1987 a day ago | parent | next [-] | | Unless done in collaboration with proper institutions, that would be playing with fire. Consequences from letting who-knows-who from who-knows-where do who-knows-what in your name can be life destroying. There are multiple cases about people in USA running laptop farms without asking questions and making good money, but one day ending up on a receiving end of federal prosecution. | |
| ▲ | csomar 3 days ago | parent | prev | next [-] | | I think you need to give them your identity/bank account to route the payments. Otherwise, 50% is too high for a laptop placement + vpn. | | |
| ▲ | goolz 3 days ago | parent [-] | | So in my case this is partially correct, yes. They did not want access to the actual accounts but it was heavily implied that they would be using my personality, my identity, my Upwork profile (and my PayPal to receive payment). I would do it all for the most part. I think the Upwork jobs were just a front but I can only suspect. They explained it as wanting an endpoint while I did the client facing stuff. It was all strange and vague but you make a great point. While they were never outward about the end goal it was a mix of money laundering and identity laundering. No joke I stopped using Upwork after the novelty wore off and it was a regular occurrence. Also of note, they almost always said something about how they were Chinese and wanted to do this because they could not get legit work with their identity or some other BS. This was not one time but at least half a dozen. Would love to hear from someone who took them up on these offers. edit: will add that I speak some Chinese, I had Zoom calls with them on one occasion. I was able to glean that maybe they were not being aboveboard about their nationality and also that there were a bunch of people in the background running the same script. All so bizarre. Best guess? They use compromised PayPals to pay people out without a care what happens, launder some of the money because why not? And then they get access to a Stateside identity with an endpoint they can do god only knows what with. | | |
| ▲ | isoprophlex 3 days ago | parent [-] | | Very interesting, thanks for expanding. If I were in national security and/or fraud prevention I'd be honeypotting the fuck out of this concept, for sure. |
|
| |
| ▲ | palebluedot 3 days ago | parent | prev [-] | | I would worry you run a real risk of becoming unbanked once those funds hit your bank account, or worse | | |
| ▲ | csomar 3 days ago | parent | next [-] | | You'll need to convince the court that you were not aware they were the North Koreans. You run a very real risk of jail, not just becoming unbanked. | | | |
| ▲ | noir_lord 3 days ago | parent | prev [-] | | I’d be more worried about getting a visit from your local government as well. Giving people unrestricted access to your endpoint is up there with run in a tor exit node. |
|
|
| |
| ▲ | cucumber3732842 3 days ago | parent | prev [-] | | They're mostly harmless residential VPN stuff so people in wherever can pretend to be an American to Netflix or whatever. The actually "crimey" stuff is the minority. If it weren't it'd be too easy to crack down on. Same math as laundering through a real business. |
| |
| ▲ | Macha 3 days ago | parent | prev [-] | | Usually not so bluntly in the first email but I’ve seen a few emails in my spam that seem likely to have been leading that direction. |
|
|
| ▲ | Grosvenor 3 days ago | parent | prev | next [-] |
| I've gotten the north Korean wanting to use my upwork account... I'd have to create one first. But now the Nigerian "format" scammers are into job scams. I got an email that reeked and played along a bit. I was "hired" after a curiously simple interview via signal, and had to wait for my "supervisor" to come train me. Eventually I got the "boss" on the line to talk, he went absolutely postal when I asked if he was an African scammer. Apparently that's racist now. |
| |
| ▲ | zahlman 2 days ago | parent [-] | | > I've gotten the north Korean wanting to use my upwork account... I'd have to create one first. I've gotten that too, now that everyone ITT is talking about it. I had no idea what was going on with it at the time and ignored it. Amusing to know that there could be state actors behind it. The version I got explicitly suggested that I create such an account for the purpose if I don't already have one (I didn't, and of course still don't). > But now the Nigerian "format" scammers are into job scams. Sorry, "format"? | | |
| ▲ | Grosvenor a day ago | parent [-] | | "format" is what Nigerian scammers call a playbook for each scam type. So a pig butchering "format", romance scam "format", inheritance scam "format", etc. They offered to help me setup an Upwork account too. Tiresome creeps. |
|
|
|
| ▲ | tayo42 3 days ago | parent | prev | next [-] |
| How much does it pay? |
| |
|
| ▲ | csomar 3 days ago | parent | prev | next [-] |
| Yes, though the North Korean angle was implied? I thought it is more likely to be a blackhat interview service than the North Korean themselves. |
|
| ▲ | Spoom 3 days ago | parent | prev | next [-] |
| Usually it's the Phillipines or an African country or something, but so very many times. |
| |
| ▲ | bombcar 3 days ago | parent [-] | | The better scams are now laundering NK through sub-Saharan Africa first. |
|
|
| ▲ | cmrdporcupine 3 days ago | parent | prev [-] |
| Amazingly, Gmail dumps those straight to spam bucket for me. And yep, I get them. |