A friend of mine, John D., received this outreach on Threads (see below).
At first, he thought it was the standard fake employer scam, but it is more than that. It is very likely part of a North Korean fake employee scam. I have written about these North Korean scams that attempt to get remote positions at companies around the world in order to pick up paychecks, steal intellectual property, steal money (or cryptocurrency), and hit the employer up for a ransom when they are discovered.
. 
I have written about these North Korean scams that attempt to get remote positions at companies around the world in order to pick up paychecks, steal intellectual property, steal money (or cryptocurrency), and hit the employer up for a ransom when they are discovered.
In this particular example, a North Korean is trying to recruit a native language speaker in their target country. They provide a sob story about not being able to earn enough money in their home country and not being able to get a job in the targeted victim’s home country. The North Korean will get the job interview and do the work, but the contacted person will attend the interviews and participate in team meetings. These days, because of fake employees, most companies require remote employees to get on camera during team meetings. The sender offers to split the gained paychecks 50/50.
Uh, but it is illegal in so many ways. So, do not get tricked into participating. Law enforcement has arrested many of these participating “mules,” and they get sent to prison, get a felony record, and have to pay back the money plus fines. It is definitely not worth it.
The North Korean fake employee program is headed by the leader of North Korea and likely involves many thousands of North Koreans. They operate in distributed teams, often located in Asia, Russia and other North Korean-friendly countries that are easier to operate in than North Korea.
The North Korean fake employee schemes operate across the criminal spectrum. Some use fake identities, many steal and use other people’s identities, and they, too, like in this case, hire real people to be involved using their identities. Sometimes, the North Korean fake employees actually do the work. Sometimes the work is farmed out to other subcontractors. And sometimes they do not work. Instead, they just try to collect a few paychecks before they are terminated.
There have been hundreds of people who accepted being the “frontman” or “money mule” from outreach like the one above. Most, when arrested, claim they did not know they were working for North Korea, but oftentimes their subpoenaed private communications reveal that they did.
Do not get tricked by a sketchy job deal offering “easy money”. It is a scam. It is likely a North Korean fake employee scam.
