In a startling turn of events, KnowBe4 (www.KnowBe4.com), a leading cybersecurity awareness training company, recently uncovered an elaborate scam when it unwittingly hired a North Korean spy. This incident (https://apo-opa.co/47eiR1n) has sent shockwaves through the business community, highlighting the growing risks associated with remote hiring practices in an increasingly digital world.

The incident occurred in July when the cybersecurity firm’s US branch hired what appeared to be a qualified candidate for a remote position. Despite rigorous background checks and video interviews, the fraudster infiltrated the company by leveraging a stolen US identity. Using a virtual private network (VPN) and logging in at night from wherever he physically was (either China or North Korea), the imposter convincingly portrayed themselves as working from the United States.

Anna Collard, SVP Content Strategy&Evangelist at KnowBe4 AFRICA, explains, “Technology is making it easier for bad actors to infiltrate your organisation. They use sophisticated strategies helped by artificial intelligence (AI) to create fake, but believable identities which get them hired and then use proxies in country to gain access to the company’s IT systems.”

KnowBe4 uncovered the deception when the company-provided laptop immediately began downloading malware upon first use. Fortunately, KnowBe4’s security measures detected the attempted attack  early, and they prevented any data compromise. However, the incident has raised serious concerns about the vulnerabilities in remote hiring processes, even for companies specialising in cybersecurity.

Lessons learnt

The incident gave KnowBe4 a lot to think about and a chance to discuss how they could enhance their hiring process. “For a cybersecurity company like us to get caught with egg on our face was a big wake-up call,” admits Collard. “We could have kept quiet, but instead we shared our story hoping other organisations could learn from it.”

As a result, KnowBe4 implemented several process changes to catch this kind of incident earlier. “For example, in the US, we will only ship new employee workstations to a nearby UPS shop and require a picture ID,” she says.

Red flags and safeguards 

Because of sophisticated technology, it’s difficult for companies who are hiring to distinguish between who is real and who is fake. “Some methods fraudsters use include fake identities and relying on AI images to evade detection. Their motive is usually to gain access to sensitive company data, either for financial gain or to support the North Korean regime (https://apo-opa.co/3X3wPOY).”

Despite what they are up against, organisations can still outfox these fraudsters, provided the right HR measures are in place.

Inconsistent CV details: Look for discrepancies in birth dates or unexplained gaps in employment history.
Reference checks: Go beyond email verifications; conduct phone calls to confirm references.
Overqualification: Be wary of candidates who seem overqualified for the role, as this may be a tactic to avoid scrutiny.
Camera avoidance: Candidates refusing to appear on camera during interviews should raise suspicion.
Digital footprint: Conduct thorough background checks, including social media analysis. A “digital ghost” with no online presence is a red flag.
Multi-Factor Authentication (MFA): Implement MFA from day one, using hardware tokens sent to verified addresses.
Secure devices: Provide pre-configured, secure devices to new hires, restricting access to sensitive information until trust is established. Also scan your remote devices to make sure they have not been compromised.
Limit access: New employees should only be able to access a minimal number of necessary apps to go through the new employee training, and their workstations should be locked down with no data residing on them, except for the company’s endpoint security and management tools.

Conclusion

The KnowBe4 incident serves as a stark reminder of the growing challenges in remote hiring and cybersecurity. As organisations continue to adapt to a global workforce, the need for robust security measures has never been more critical.

“Your HR and IT processes need to work in tandem and be watertight when recruiting,” concludes Collard. “By adopting stringent security practices and remaining vigilant, companies can mitigate the risks associated with remote hiring and protect themselves from sophisticated scams.”

This wake-up call underscores the importance of continuous improvement in security protocols, even for industry leaders. “As the digital landscape evolves, so too must our approach to safeguarding our organisations against increasingly cunning threats.”

Distributed by APO Group on behalf of KnowBe4.

The Chargé d’Affaires of the Indonesian Embassy in Tripoli, Dr. Dede A. Rifai, accompanied by Economic Affairs Officer Robert Edwien W., received a visit from the Head of the International Cooperation Directorate of the Libyan Ministry of Marine Resources, Ahmed Moh. Al-Ghanai, who was accompanied by Ashraf Ibrahim Al Tahir Baryon and Abdulqadir Mousay Saed Aljald. They will be participating in the Freshwater Fish Training for African Countries in Bali on September 8-14, 2024.

This training activity is part of a capacity-building program within the framework of global South-South Cooperation, aimed at sharing and learning best practices in the development of sustainable aquaculture for other developing countries.

The freshwater fish training will be attended by 20 participants from 10 African countries, including Libya. Participants will gain an understanding of the Implementation of Blue Economy in the Fisheries Sector; Tilapia and Catfish Farming with the Biofloc System, as well as Fish Processing and Value Addition for Tilapia and Catfish.

Congratulations and best of luck to the Libyan participants who will be attending the freshwater fish training!

Distributed by APO Group on behalf of Embassy of the Republic of Indonesia in Tripoli, Libya.

The Ministry of Justice has announced that it will organize a dialogue focusing on Justice, Development, and the Geo-Politics of the Horn of Africa from 4 to 6 September at Asmara Palace Hotel.

Ms. Fauzia Hashim, the Minister of Justice, stated that this program is a continuation of a similar forum held in April this year. She highlighted that the objective is to share experiences with experts who have a deep understanding of the geo-political dynamics of the Horn of Africa.

The participants will include lawyers, sociologists, anthropologists, writers, researchers, historians, and others, both Eritreans and foreigners, who possess substantial knowledge of the subject.

During the three-day dialogue, research papers will be presented on topics such as “Eritrea: From Victim to a Key Player in the Geopolitics of the Horn,” “The Big Rupture in International Relations and Its Importance to the Region,” “The History and Geopolitical Dynamics of the Horn of Africa and Beyond,” “Land, Indigenous Laws, and Development in Africa,” “Decolonizing the Concept of Development and Integration in Africa,” “Assessment and Re-Assessment of the Integration Process in Africa,” “Building a Common Understanding on Synergies of Development,” and “Evaluation of Synergies on Development in the Horn of Africa, Red Sea Region, and the Nile Basin.”

Distributed by APO Group on behalf of Ministry of Information, Eritrea.

President Isaias Afwerki met this afternoon with his host, President Xi Jinping, at the Great Hall of the People, for extensive discussions on consolidation of bilateral ties and other matters of mutual interest.

Underlining that the world is undergoing through a vital phase of transition which has engendered an earnest global quest for viable and enduring solutions, President Isaias indicated that China can potentially play a decisive role in the crystallization of the new dispensation on account of the exponential and all-rounded growth that it has achieved in the past decades.

President Isaias further expressed the hope that China’s preeminent role would be appropriately leveraged in promoting cooperation and partnerships to the benefits of the countries and peoples of the world.

President Xi Jinping for his parts expressed his appreciation for the participation of President Isaias at the 9th FOCAC Summit and reiterated China’s commitment to further enhance its solid and strong ties of cooperation with Eritrea.

The meeting was attended by Mr. Osman Saleh, Minister of Foreign Affairs; Mr. Tsegay Tesfatsion, Eritrea’s Ambassador to the People’s Republic of China; as well as Mr. Wang Yi, Minister of Foreign Affairs of China; Mr. Wang Wentao, Minister of Trade; Mr. Lan Fo’an, Minister of Finance; Mr. Zheng Shanjie, Minister of National Development; and Mr. Li Xiang, Ambassador of China to Eritrea.

Distributed by APO Group on behalf of Ministry of Information, Eritrea.