KnowBe4, a security awareness training company, writes about phishing, ransomware, social engineering, and fraud.
HN commenters mostly cite its account of a North Korean fake IT worker who tried to infiltrate the company.
Fable Security | https://fablesecurity.com/jobs | SF | Full-time | Backend Engineers, Full-stack Engineers Fable Security is tackling the most critical challenge in cybersecurity: human errors. Human error is the #1 cause of security breaches, yet employees lack effective ways to learn what they need to stay secure. Fable is here to change that.
Fable’s mission is to prevent cyber attacks (see [1] [2] [3] below) by harnessing AI to transform human behavior and improve human defenses. We use the best practices from GenAI and behavioral systems to automatically identify your employees at risk, curate hyper-personalized briefings, and deploy at the most relevant time, enabling employees to make the best security choices everywhere they work. This is a multi-billion-dollar market, and every company—from SMB to Fortune 500 enterprises—is racing to combat this problem.
We are hiring backend and full-stack engineers to build out our data targeting, video generation and delivery, and other parts of our stack.
Our team works from our San Francisco office 3 days a week, and places high value on mutual trust, execution, and delivering highly differentiating product experiences and results to our customers.
Fable is founded by the early team from Abnormal Security ($5B+ valuation) and backed by Greylock Partners, the investors behind Palo Alto Networks, Okta, Rubrik, Figma, and others. Our team has built many of the iconic products at Meta, Twitter, Flexport, and more. Our team has…
> This is nonsense. Users would be free to stick to the Apple app-store and apps. What it means is those that wish to install from alternative locations, can.
And that will be great news to scammers, hackers and criminals that have been easily plaguing their malware and trojans on infected Android for years to do the same on iOS apps to go all open season on the platform.
> Competition in the app store space is a good thing. Competition generally is a good thing. This is what it is about.
Exactly. Is that why you have chosen to not use a Linux phone? Maybe the competition outside of Android and iOS is not competing hard enough and instead resorted to shutting down and giving up and had to scream and cry at Google and Apple for being so successful.
> Scaremongering this kind of nonsense to suppose walled-garden ecosystems (that primarily benefit the gardener, not the plants) is a stretch.
Scaremongering? Why is it that over the space of 8 years Android has been plagued more by ransomware [0], malware, and attacks delivered by sideloading? [1] than iOS has? Bringing the same security ills and problems found on Android devices into iOS can only result in creating more problems than solving them.
> Congratulations to the EU indeed, for the right reasons.
Nope. Not so fast.
I don't think there is anything to celebrate here, unless you want to see a new era of easy side-loading cracked apps, to users to easily encounter ransomware on their phones and have it take…
Direct post to the blog:
https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-infiltrate-us
I'm a little skeptical of this orgs hiring practices in the sense that nobody met this guy, they hired him and some of the details are a little vague like:
- Background check appears inadequate. Names used were not consistent.
- References potentially not properly vetted. Do not rely on email references only.
I'm wondering, was their background check effectively outsourced and it came back good or bad and they just accepted it?
Considering how many people are sometimes involved in hiring I can imagine that some folks just run the background check and everyone sort of ignores any strange signs and assumes someone else will look closer.
they just out source the in person parts
> It turns out there is a burgeoning sub-industry of college-aged males of Asian ancestry who cannot wait to get paid for participating in these schemes. There are Discord channels all around the world just for this. They make a few hundred to a few thousand dollars for allowing their identity to be misused or participating in the scheme. That way, they can interview in person or take drug tests if the job requires that.
https://blog.knowbe4.com/our-interview-of-a-north-korean-fake-employee
You're assuming the process isn't automated. This could just be an app that gets them more green dots on their Github page. This developer might not even be a real person. https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-infiltrate-us
Preferably not too early in your career, lest your AI-generated mugshot cause you to be picked for a North Korean fake IT contractor.
https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-infiltrate-us