BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Smile\, you're on camera! Livestreaming from North K
 orea's IT\n   workers laptop farm\n   Tags: DEF CON Official Talk | Demo ð
 Ÿ’»\n   When: Saturday\, Aug 8\, 15:00 - 15:59 PDT\n   Where: LVCCW Level 
 1 Hall 3 903 (Main Track 5) and DCTV-5 - [1]Map\n\n   Description:\n\n   W
 e infiltrated a cell of North Korean IT workers dedicated to\n   obtaining
  remote employment for the DPRK\, attributed to Famous\n   Chollima (Lazar
 us Group). Posing as facilitators\, we went through\n   their full recruit
 ment process and\, once inside\, provided them with\n   controlled environ
 ments that allowed us to observe and record their\n   operations from the 
 inside.\n\n   In parallel\, we used OSINT and targeted reconnaissance to m
 ap their\n   infrastructure\, track financial movements\, and reconstruct 
 the broader\n   structure behind the operation. This includes networks of 
 fake\n   companies and identities\, local facilitators\, fraudulent H-1B v
 isa\n   schemes\, and a coordinated model of transnational fraud used to g
 ain\n   access to Western companies.\n\n   The talk features recorded dire
 ct interactions with DPRK operatives\n   and live recordings from a fake l
 aptop farm we built for them. While\n   they believed they had remote acce
 ss to legitimate work systems\, we\n   captured everything: how they set u
 p their infrastructure\, handled\n   authentication\, configured VPNs\, an
 d operated on a daily basis.\n\n   This was the first time this kind of th
 reat campaign was profiled\,\n   recorded\, and published from the inside.
  Now we want to share it with\n   you. Smile\, youâ€™re on camera!\n\n   O
 riginal article: -\n   https://any.run/cybersecurity-blog/lazarus-group-it
 -workers-investigation/\n\n   Media: -\n   https://www.bleepingcomputer.co
 m/news/security/north-korea-lures-engineers-to-rent-identities-in-fake-it-
 worker-scheme/\n   -\n   https://thehackernews.com/2025/12/researchers-cap
 ture-lazarus-apts-remote.html\n\n   Speakers:Heiner GarcÃa\,Mauro Eldritch
 \n\n   SpeakerBio:  Heiner GarcÃa\, NorthScan\n\n   Researcher & Strategic
  intelligence Analyst\n\n   Founder of NorthScan\n\n   Cyber Threat Intell
 igence at Telefonica Tech\n\n   SpeakerBio:  Mauro Eldritch\, Leader at Bi
 tso Quetzal Team\n\n   Hacker and Speaker.\n\n   Founder of BCA LTD and DC
 5411.\n\n   I wrote a book interviewing Threat Actors.\n\n   I like Threat
  Intelligence and Golden Retrievers.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\
 n\n\n
DTEND:20260808T225900Z
DTSTART:20260808T220000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 903 (Main Track 5) and DCTV-5
SUMMARY:Smile\, you're on camera! Livestreaming from North Korea's IT worke
 rs laptop farm
END:VEVENT
END:VCALENDAR
