North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location [Updated]

Amazon detected a North Korean infiltrator working as a contract system developer by monitoring keystroke input lag. The imposter's 110ms keystroke delay revealed they were remotely controlling a laptop located in Arizona from North Korea. Amazon has blocked over 1,800 DPRK infiltration attempts since April 2024, with attempts increasing 27% quarter-over-quarter. The company's Chief Security Officer emphasizes that active monitoring is essential, as these infiltrators would go undetected without proactive security measures. A woman facilitating this fraud was sentenced to prison earlier this year.