blueteamsec

570 readers

20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

Amazon Caught North Korean IT Worker By Tracing Keystroke Data (www.bloomberg.com)

submitted 1 day ago by digicat to c/blueteamsec

1 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] slazer2au@lemmy.world 4 points 1 day ago

https://archive.is/p4AcP

Archive link to read the article.

Keystroke data from the laptop of a worker who was supposed to be in US should have taken tens of milliseconds to reach Amazon’s Seattle headquarters. Instead, the flow from this machine was more than 110 milliseconds, Amazon’s Chief Security Officer Stephen Schmidt told me.
The barely perceptible lag suggested the worker was half a world away.

Well, that is one way do it.