InsideAMisconfiguredNorthKoreanServer_RoyWilliams.pdf (6 MB)

A DistrictCon talk abstract describes a misconfigured North Korean server that exposed logs, documentation, and animation files tied to overseas animators and IT workers. The material reportedly included outsourced animation project data, factory video tours, shopping activity, internet functionality details, and software used under restricted operating conditions. The talk pairs the server findings with stealer-log research to show how North Korean workers communicate, manage projects, and leave operational traces that can help identify similar overseas workforce activity.