- Role
- Backend engineer
- Refs
- enthusiastic
- Start
- Monday
Unverified
★A Malware & Monsters game★
Your remote position awaits, Comrade. Every move has a price.
A new hire starts Monday. What can they reach? What do we know? What does it cost to be wrong? Comrades, get them onto the inside. Company, decide on evidence that may be noisy: cut the wrong hire and Exposure rises by 2; wait, and the operation gets further in. Looks prove nothing.
On file: your new hires
- Role
- DevOps engineer
- Refs
- enthusiastic
- Start
- Monday
Unverified
- Role
- Contract developer
- Refs
- enthusiastic
- Start
- Monday
Unverified
On Monday, 3 people start. One of them is an operator's persona, sealed by the Incident Master until the debrief. An odd detail is not proof. Checking is.
The case file: three revolutionary duties
The Interview
The references agree a little too quickly.
Onboarding
A laptop ships to a very patient address.
The First Month
Access spreads. A remote tool nobody in IT approved appears.
Two chairs, one case file
The Comrades' chair
- Persona
- Ground Crew
- Tooling
- Money
Get hired. Stay hired. Reach what you came for: wages, data or keys.
The Company's chair
- HR
- Engineering
- SecOps
- Finance & Legal
Weigh the evidence. A wrong cut costs you; so does waiting.
- One chair at a time. The Incident Master plays the other side.
- Both chairs at once. Two tables, one Incident Master, one debrief. Learning over winning.
- Swap and replay. New persona, new puzzle.
- Stop the line. Point on three. A tie: one sentence each, then vote again. Tie twice: no accusation.
The Chollimas and the bench
The Chollimas
Chollima is CrowdStrike's tag for DPRK threat clusters; Famous Chollima is its name for the one tied to IT workers. A Chollima card is the cell's tradecraft label: known tools and tells.
The bench
The bench grades the file, not the flag. What does it do? Never who sent it.
Field notes from public sources
- Device hashes spoofed so a capture card shows up as a webcam. CrowdStrike, on Famous Chollima, since May 2026.
- Report any address reliably tied to an employment-device delivery. FBI IC3 PSA I-101326, 13 Oct 2026.
- These workers collect salaries, steal data and extort victims; the state takes an estimated 85 to 90% of the revenue. FBI IC3 PSA I-101326.
Bulletin of fair play. Judge the process, not the person. Nobody is a suspect because of an accent, a passport or a face. The joke is the propaganda voice, never the people.