Department of Vigilance dispatch · TLP:CLEAR, share freely, verify first
Your remote position awaits, Comrade.Every move has a price.
One threat applies for the job. Two chairs, one case file. Built on FBI and CrowdStrike reporting on DPRK IT workers who steal data, extort victims and hold persistent access.
A new hire starts Monday. What can they reach? What do we know? What does it cost to be wrong? Comrades, get them onto the inside. Company, decide on evidence that may be noisy: cut the wrong hire and Exposure rises by 2; wait, and the operation gets further in.
RoleBackend engineer Refsenthusiastic StartMonday
Unverified
RoleDevOps engineer Refsenthusiastic StartMonday
Unverified
RoleContract developer Refsenthusiastic StartMonday
Unverified
The case file: three revolutionary duties
1
The Interview
The references agree a little too quickly.
2
Onboarding
A laptop ships to a very patient address.
3
The First Month
Access spreads. A remote tool nobody in IT approved appears.
Two chairs, one case file
The Comrades' chair
PersonaGround CrewToolingMoney
Get hired. Stay hired. Reach what you came for: wages, data or keys.
The Company's chair
HREngineeringSecOpsFinance & Legal
Weigh the evidence. A wrong cut costs you; so does waiting.
One chair at a timeThe Incident Master plays the other side.Both chairs at onceTwo tables, one Incident Master, one debrief. Learning over winning.Swap and replayNew persona, new puzzle.Stop the linePoint on three. A tie: one sentence each, then vote again. Tie twice: no accusation.
The Chollimas
Chollima is CrowdStrike's tag for DPRK threat clusters; Famous Chollima is its name for the one tied to IT workers. A Chollima card is the cell's tradecraft label: known tools and tells.
The bench
The bench grades the file, not the flag. What does it do? Never who sent it.
Field notes from public sources
-
Device hashes spoofed so a capture card shows up as a webcam.CrowdStrike, on Famous Chollima, since May 2026.
-
Report any address reliably tied to an employment-device delivery.FBI IC3 PSA I-101326, 13 Oct 2026.
-
These workers collect salaries, steal data and extort victims; the state takes an estimated 85 to 90% of the revenue.FBI IC3 PSA I-101326.
Bulletin of fair play. Judge the process, not the person. Nobody is a suspect because of an accent, a passport or a face. The joke is the propaganda voice, never the people.
Try it out at comradesandchollimas.com
