lazarusholic

Everyday is lazarus.dayβ

Another day another North Korean scammer

2025-03-12, dazhengzhang
https://archive.is/WxtB0
#ContagiousInterview

Contents

Another day another North Korean scammer
This time using the same "fake Zoom" scam that's been popular recently
I'll detail what happened to me in this 🧵
First I got added to a group with fake "Joan" the CEO of @Openfort
He asked to schedule a call with me, he used my scheduling link which used Google Meet, so far so good
He sent real links and decks to build rapport
When trying to get him to join the call, he makes up some excuse about an internal meeting
The link is to a very obviously real business website "http://businessmeet.xyz"
The website itself is a fake Zoom clone
The site acted like a normal Zoom call. I tool the call on my tablet though, so not sure what the behavior would've been on desktop. It probably tried to determine the OS before prompting the user to do something, but it just wasn't built …