Latest news with #Raney
Yahoo
16-04-2025
- Business
- Yahoo
Fake LinkedIn profiles, Webex, and Fiverr: Inside the North Korean IT worker scheme roiling the Fortune 500
A key component to a scheme developed by North Koreans in getting remote-work tech jobs is working with Americans on mainland soil to serve as a facilitator or proxy—in exchange for hefty fees. A cybersecurity expert posed as an American willing to go along with the IT worker plot to learn the ins and outs of the blueprint U.S. authorities estimate has generated hundreds of millions for North Korea, and impacted hundreds of Fortune 500 companies. The message Aidan Raney sent to a Fiverr profile he learned was being manned 24/7 by North Korean engineers looking to recruit American accomplices was simple and straightforward. 'How do I get involved?' Raney asked. The five-word text worked, said Raney, and days later the Farnsworth Intelligence founder was on a series of calls with his new North Korean handlers. Raney spoke to three or four different people, all of whom claimed to be named 'Ben,' and seemed not to realize that Raney knew he was dealing with multiple individuals and not just a single person. It was during the second call that Raney asked rapid-fire questions to learn the finer points of serving as a proxy for North Korean software developers posing as Americans to get remote-work tech jobs. How would the North Korean engineers handle his workload for him? The plan was to use remote-access tools on Webex to evade detection, Raney told Fortune. From there, Raney learned he would be required to send 70% of any salary he earned in a potential job to the Bens using crypto, PayPal, or Payoneer, while they would handle creating a doctored LinkedIn profile for him as well as job applications. The Bens told Raney they would do most of the groundwork, but they needed him to show up to video meetings, morning standups, and scrums. They even took his headshot and turned it into a black-and-white photo so it would look different from any of his pictures floating around online, he said. The persona they cultivated using Raney's identity was someone well-steeped in geographic information system development, and wrote on his fake bio that he had successfully developed ambulance software to track the location of emergency vehicles. 'They handle essentially all the work,' Raney told Fortune. 'What they were trying to do was use my real identity to bypass background checks and things like that and they wanted it to be extremely close to my real-life identity.' The vast North Korean IT worker scam has been in effect since about 2018 and has generated hundreds of millions in revenues annually for the Democratic People's Republic of Korea (DPRK). In response to severe economic sanctions, DPRK leaders developed organized crime rings to gather intelligence to use in crypto heists and malware operations in addition to deploying thousands of trained software developers to China and Russia to get legitimate jobs at hundreds of Fortune 500 companies, according to the Department of Justice. The IT workers are ordered to remit the bulk of their salaries back to North Korea. The UN reported lower-paid workers involved in the scheme are allowed to keep 10% of their salaries, while higher-paid employees keep 30%. The UN estimated the workers generate about $250 million to $600 million from their salaries per year. The money is used to fund North Korea's weapons of mass destruction and ballistic missile programs, according to the Department of Justice, FBI, and State Department. In the past two years, the DOJ has indicted dozens of people involved in the scheme, but cybersecurity experts say the indictments haven't deterred the lucrative IT scam. In fact, the scheme has grown more sophisticated over time, and North Koreans continue to send out numerous applications to open job postings using AI to perfect the bios and coach American proxies through interview questions. Bojan Simic, founder of verification-identity firm Hypr, said the social engineering aspect has evolved, and North Korean engineers—and other crime rings that have mimicked the scam—are using public information plus AI to augment past tactics that have worked for them. For instance, IT workers will look at a company's employee profiles on LinkedIn to learn their start dates, and then call a service desk using AI to mask their voice to reset their password. Once they get to the next security question, they'll hang up and call back once they know the answer to the next question—like the last four digits of a Social Security number. 'Two and a half years ago, this was a very manual process for a human being to do,' said Simic. 'Now, it's a fully automated process and the person will sound like somebody who speaks like you do.' And it isn't just American accents North Koreans are deepfaking. A security officer at a Japanese bank told Simic he hardly ever worried about hackers calling IT service desks and tricking employees into providing information because most hackers don't speak Japanese—they speak Russian or Chinese, recalled Simic. 'Now, all of a sudden, the hackers can speak fluent Japanese and they can use AI to do it,' he said. It's completely upended the risk landscape for how companies are responding to these threats, said Simic. Still, there are methods to strengthen hiring practices to root out job seekers using false identities. 'Adding even a little bit of friction to the process of verifying the identities' of people applying for jobs will often prompt the North Korean engineers to chase easier targets, Simic explained. Matching an IP location to a phone location and requiring cameras to be turned on with adequate lighting can go a long way, he said. In Raney's case, the Bens landed him a job interview and they used remote access to open the Notepad application on his screen so they could write responses to the recruiter's questions during the discussion. The scheme worked: A private U.S. government contractor made Raney a verbal offer for a full-time remote-work job that paid $80,000 a year, he said. Raney immediately had to turn around and tell the company he couldn't accept the offer and that he was involved in an incident-response investigation for a client. He eventually let things die out with the North Korean Bens, but before he did, he spent some time trying to get them to open up. He asked about their families, or the weather. He texted the Bens and asked whether they spent time with relatives during the holidays. They responded saying there was nothing better than spending time with loved ones, adding a wink emoji, which struck Raney as different from the way they typically responded. Based on the messages, and seeing people hovering over their shoulders and pacing behind them during video calls, Raney concluded their conversations were heavily monitored and the North Korean engineers were surveilled constantly. Raney's account was later publicized on an International Spy Museum podcast. Before the episode aired, he sent the North Korean Bens a note that said, 'I'm sorry. Please escape if you can.' The message was never opened. In response to a request for comment, LinkedIn directed Fortune to its update on fighting fake accounts. A Fiverr spokesperson said the company's trust and safety team monitors sellers to ensure compliance and continuously updates its policies to reflect the evolving political and social landscapes. In a statement, Payoneer told Fortune the firm uses robust compliance and monitoring programs to combat the challenge of DPRK operatives posing as IT consultants. This story was originally featured on
Yahoo
10-04-2025
- Yahoo
Milwaukee ICE arrests; another man arrested, his fiancée speaks out
The Brief There's a video circulating regarding another apparent immigration arrest in Milwaukee. Patricia Raney said her fiancé was arrested Tuesday, April 8, on West Scott near South 33rd on Milwaukee's south side. Immigration attorneys said ICE has the right to arrest undocumented people, even if they haven't been convicted of or charged with a crime. MILWAUKEE - After outcry over recent U.S. Immigration and Customs Enforcement (ICE) arrests at the Milwaukee County Courthouse complex, there's a video circulating regarding another apparent immigration arrest in Milwaukee. FOX6 News spoke with the fiancée of the man in the video. She said when she first got the call, she thought it was a joke. It wasn't. What we know Patricia Raney described what happened to her fiancé, Jose Rosas Morales. He is the man seen in this now-viral video on social media. The video appears to show him getting arrested on Tuesday, April 8, on West Scott near South 33rd on Milwaukee's south side. SIGN UP TODAY: Get daily headlines, breaking news emails from FOX6 News Raney said her fiancé told her it was an ICE arrest. "They just picked him and took him," Raney said. "He texted me when he was in the detention center, they let him call and message me before they had to go book him or whatnot." The 33-year-old father of three and Mexican native had left court in Racine and arrived at his Milwaukee home to get ready for work. She said agents arrested him before he could get inside. "He was going to be detained in the [Dodge Detention Facility] until they can find a flight home for him to Mexico," she said. Dig deeper Court records show Rosas Morales has a history of charges, including an OWI and driving without a license. Raney said Rosas Morales' bail has been set at $1,500. Immigration attorneys told FOX6 News ICE has the right to arrest undocumented people, even if they haven't been convicted of or charged with a crime. FREE DOWNLOAD: Get breaking news alerts in the FOX LOCAL Mobile app for iOS or Android Local perspective With a baby on the way, Raney said her family is facing a tough reality. "It's really hard. I don't want to do this alone. We need him," Raney said. "His status is nothing to me and my kids, he's just a father in a loving family that's all we need. He paid his taxes. He's not a bad person at all." What they're saying ICE provided the following statement to FOX6 News: "As part of its routine operations, ICE arrests aliens who commit crimes and other individuals who have violated our nation's immigration laws. All aliens in violation of U.S. immigration law may be subject to arrest, detention and if found removable by final order, removal from the United States, regardless of nationality. U.S. immigration laws allow aliens to pursue relief from removal; however, once they have exhausted all due process and appeals, the aliens remain subject to a final order of removal from an immigration judge and ICE must carry out that order." The Source The information in this post was produced by FOX6 News.
Yahoo
11-03-2025
- Politics
- Yahoo
Germantown looking to repeal holiday decoration ordinance
GERMANTOWN, Tenn. — The city of Germantown is taking steps to repeal a city-wide ordinance on holiday decorations. This comes as the city faces a lawsuit after a woman said her First Amendment rights were violated after receiving a fine for displaying Halloween decorations on Christmas. 'This ordinance repeal, it's not going to remove the important framework that preserves the integrity of our neighborhoods, not in its entirety,' said Germantown's Vice Mayor, Mary Anne Gibson. The Germantown Board of Mayor and Alderman approved the first measure to repeal a city-wide holiday or seasonal decoration ordinance. Germantown drops citation for holiday decorations Right now, the rules limit the time a person can have decorations up 45 days before the intended occasion or 30 days after. Outside that time, decorations would have to come down. 'I do have some legal concerns about the seasonal decoration ordinance, and based on those, I would recommend that the ordinance as written be repealed,' City Attorney David Goodman said. Alexis Luttrell, the woman who filed the lawsuit, alleges her First Amendment right to free speech was violated. She argued that her skeleton decorations could be used outside of Halloween. 'That's not something that I'd do necessarily, but it was something,' said Germantown resident Reggie Raney. 'I did see the article and was like, that's silly.' Raney said her family is huge fans of Halloween and recalls that during COVID, decorations, whether seasonal or holiday, were up earlier than usual. 'We are charged,' Gibson said. 'Our mission is to promote and preserve the integrity of our residential neighborhoods.' Germantown's Board of Aldermen said while a total repeal is not in the books, they are concerned about the city losing its charm. Germantown considers getting rid of ordinance at center of skeleton decorations lawsuit 'I think most residents appreciate that Germantown is Germantown,' Raney said. The next reading is now set for April 14. 'We encourage all residents to come and attend that meeting and speak on the record if they choose to,' said Germantown Mayor Mike Palazzolo. The City of Germantown is still facing a lawsuit for the seasonal decoration ordinance. A scheduling conference is set for the end of April. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
Yahoo
19-02-2025
- Yahoo
Emotional testimony for ‘Jaya's Law' argues for tougher penalties for wrong-way drivers
LAS VEGAS (KLAS) — A Las Vegas family made an emotional plea to state lawmakers on Tuesday, telling the story of 3-year-old Jaya Brooks, who was killed in a crash involving a wrong-way driver in December 2023. The girl's father, her grandmother, Assemblymember Brian Hibbetts and several law enforcement representatives wiped tears away as they urged passage of Assembly Bill 111 (AB111), which would restore criminal penalties for wrong-way drivers on divided highways. 'I think this is one we got wrong. We hear all about wrong-way driving on the news,' Hibbetts said, presenting the bill he is sponsoring. AB111, now known as 'Jaya's Law,' would make it a misdemeanor just two years after a number of traffic offenses were decriminalized and turned into civil infractions. The horrific crash occurred on Dec. 9, 2023, when a driver in the northwest Las Vegas valley entered U.S. 95 traveling south in the northbound lanes, going all the way from the Kyle Canyon turnoff almost to the Elkhorn Road overpass, a distance of 2.8 miles. A head-on crash killed Jaya, 63-year-old Karen Foote, and 50-year-old Antonia Apton of Bullhead City, Arizona, the wrong-way driver. 'I can't express how much pain I walk around with that'll never go away,' Jan Brooks, Jaya's father, said Tuesday in Carson City. 'Jaya literally won my heart the moment I saw her I always knew she would live her life with a purpose. She was the best thing that had ever happened to me at that time. I won't get another birthday — another second — to spend with her. She was my perfect person,' he said. Andrea Raney, Jan's father and Jaya's grandmother, said the crash happened when the family was only six minutes from home. 'Jaya was a 3-year-old bundle of love and light,' Raney said. 'She meant so much to all of us. Karen Foote was a special education teacher and a school psychologist from Sparks. She was visiting family in Las Vegas with her husband, Ray,' she said. 'Jaya and Karen should be here,' Raney said. Nevada lawmakers target 'resort fee'-style rent practices, age for gun ownership Hibbetts offered statistics on wrong-way crashes from 2024: The Las Vegas Metropolitan Police Department had 634 reports of wrong-way drivers that year. Nevada State Police Highway Patrol had 731. Statewide, 123 wrong-way crashes were reported and 49 people died. A representative of Metro police spoke in support of AB111, along with the Nevada District Attorneys Association and the City of Henderson. 'Stricter penalties and laws for wrong-way driving can discourage this dangerous action prompting people to think twice before breaking rules, keeping Nevada's roads safer,' Raney told members of the Assembly Judiciary Committee. Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.
