“In one case, they carried on a months-long conversation, attempting to collaborate with a security researcher on topics of mutual interest.”
North Korean operators spent months building rapport on X, moved the chat to Signal or WhatsApp, then sent a file carrying a 0-day. They also published a debugging symbol downloader on GitHub in September 2022 that fetches and runs code from their own domain. Google’s advice for anyone who ran it is to reinstall the operating system. The people who find bugs for a living are the softest target in the room.