Amazon detected a North Korean IT worker in a US-based role by identifying anomalous keystroke latency and acted on that finding.
confirmed 1 article 2025-12-19
Amazon Chief Security Officer Stephen Schmidt said keystroke data from the employee showed ~110ms latency (vs expected tens of ms), which helped reveal the worker's true location.
confirmed 1 article 2025-12-19