Is this email difficult to read? View it in a web browser. ›

The Wall Street Journal ProThe Wall Street Journal Pro

CybersecurityCybersecurity

Sponsored by Zscaler logo.

North Korean Spies Want Your Jobs. Here’s What You Can Do.

By Kim S. Nash

 

Welcome back. North Korean workers are securing jobs at some of the largest American companies by masquerading as others and earning good money in the process.

What started a few years ago as an example of Pyongyang’s creativity in evading sanctions has evolved into a multimillion-dollar scheme for the regime.

WSJ's James Rundle takes a look at how corporate security chiefs can sniff out suspected North Korean applicants. Read our story.

More news: 

  • Bring back the Cyber Safety Review Board, some U.S. lawmakers urge
  • China-linked espionage on Dutch chip industry
  • Australian firms must now report ransom payments
  • Genghis Khan and Scattered Spider
 

‏‏‎ ‎

CONTENT FROM: Zscaler
Why Ransomware is Winning Despite Billions Spent on Security

Like a bank robbery, ransomware attacks find weaknesses, break in, move laterally, and steal or encrypt data. Attacks succeed because companies rely on firewalls as their primary defense. Firewalls expose public IPs, inviting attacks. Once breached ransomware quickly spreads. Zscaler CEO Jay Chaudhry shares insights on how embracing Zero Trust AI stops ransomware at all four stages of an attack.

Watch Now

 

More Cyber News

PHOTO: HWEE YOUNG/SHUTTERSTOCK

Suspected Chinese spies are targeting the Dutch semiconductor industry, Dutch Minister of Defense Ruben Brekelmans said Saturday. Maritime and aerospace companies are also being hit, cyber officials in the Netherlands said. Brekelmans said the country wants to reduce its dependency on China for raw materials. (Reuters)

Pay a ransom, file a report: An Australian law that mandates the disclosure of ransom payments went into effect Friday. Companies with annual revenues of more than three million Australian dollars must report such payments within 72 hours of turning over the funds. (InfoSecurity Magazine)

  • The U.K. is considering a similar law.
  • The Australian law, enacted in 2024, also calls for the creation of a cyber incident review board to analyze major hacks. 

PHOTO: MARK SCHIEFELBEIN

/AP

The U.S. should reactivate the Cyber Safety Review Board, four Democratic Senators urged in a letter to the Department of Homeland Security. The board broke up when DHS recently took away a chunk of funding and staff from the Cybersecurity and Infrastructure Security Agency, in DOGE cuts.

  • "When building cyber security capabilities, the software and IT ecosystem benefits tremendously from transparent, accessible, and rigorous research and forensics," Richard Blumenthal of Connecticut and Ron Wyden of Oregon (pictured), along with Mark Warner of Virginia and Elissa Slotkin of Michigan, wrote to the Department of Homeland Security. (NextGov)

Genghis Khan and Scattered Spider: The tactics of today's hackers mirror those of ancient warriors and military leaders, including the "terror and deception" techniques of Mongolia's Genghis Khan and the "sabotage from within" concept Chinese general Sun Tzu. (History)

 

About Us

The WSJ Pro Cybersecurity team is Deputy Bureau Chief Kim S. Nash and reporters Angus Loten, James Rundle and Catherine Stupp. Follow us on X @WSJCyber. Reach the team by replying to any newsletter you receive or by emailing Kim at kim.nash@wsj.com.

 
Share this email with a friend.
Forward ›
Forwarded this email by a friend?
Sign Up Here ›
 
Desktop, tablet and mobile. Desktop, tablet and mobile.
Access WSJ‌.com and our mobile apps. Subscribe
Apple app store icon. Google app store icon.
Unsubscribe   |    Newsletters & Alerts   |    Contact Us   |    Privacy Notice   |    Cookie Notice
Dow Jones & Company, Inc. 4300 U.S. Ro‌ute 1 No‌rth Monm‌outh Junc‌tion, N‌J 088‌52
You are currently subscribed as [email address suppressed]. For further assistance, please contact Customer Service at pro‌newsletter@dowjones.com or 1-87‌7-975-6246.
Copyright 2025 Dow Jones & Company, Inc.   |   All Rights Reserved.
Unsubscribe