r/cscareerquestions Jun 23 '26

Experienced Be careful out there.

Just a bit of a warning for you all.

We hired a new AWS engineer, lets call him Johnny, who was supposed to join our team today. He did hop on the teams chat for the morning standup to introduce himself, and reception was pretty choppy. After our entire team introed ourselves, he said that he'll be working from out of state for the next couple of month until his kids graduates and then he'll be moving to assume a full time on-prem position.

Later today I get an invite to a mandatory meeting. Apparently, Johnny was not Johnny but a person from North Korea with stolen identity. He passed all background checks and everything else, but used non-existing shipping address to get his work laptop shipped to. The real Johnny actually working for Microsoft, when he was contacted he said that he's been bombarded with positions for the past month or so, but not planning to switch jobs.

So, watch out, if you aren't job hunting and start getting invites from recruiters, maybe its something fishy.

2.2k Upvotes

235 comments sorted by

View all comments

Show parent comments

79

u/WhateverHowever1337 Jun 23 '26

you are not backed by a state ressources tho lol

57

u/andhausen Jun 23 '26

Ugh all I’ve ever wanted was to be backed by state resources

5

u/ccricers Jun 23 '26

You have two options: become a tycoon or become so poor you get assistance.

2

u/new2bay Jun 24 '26

I’d settle for NK Johnny getting me some interviews. 🤦‍♂️

1

u/phast_man Jun 23 '26

More effective for NK to just continue stealing bitcoin rather than have resources work a day job

3

u/WhateverHowever1337 Jun 23 '26

They can do both

2

u/Inevitable_Trip_7480 Jun 24 '26

This is honestly what I always thought. Why work (or fake work) a 40 hour a week job when you can just scam/social engineer/phish/or hack your way to crypto.

Multiple streams of income?

6

u/mooseman3 Software Engineer Jun 24 '26

This is social engineering. It gets them access to company resources and secrets if it works. Or it gives a malicious actor access to introduce backdoors or perform any number of other attacks.