Comrades & Chollimas: an incident tabletop about DPRK IT-worker fraud
A new hire starts on Monday. What can they reach? What do we know? What does it cost to be wrong? Comrades & Chollimas is a collaborative incident-response tabletop about hiring fraud by North Korean IT-worker operations, built on FBI and CrowdStrike reporting.
Two chairs share one case file. The Comrades play the operator cell and try to get hired and stay hired. The Company weighs evidence that may be noisy or partial. Nobody wins outright: at the end the table asks whether the process held.
It is a sister game of Malware & Monsters. The game has its own website with the handbooks and print sheets: comradesandchollimas.com.
How a session runs
The case file holds three new hires. One is an operator’s persona; the other two carry only weak, harmless oddities. An Incident Master leads the session, rolls the d20 and runs the debrief. Each stage has two rounds.
One case, three stages, one debrief
At a glance
| What it is | A collaborative tabletop about DPRK IT-worker hiring fraud |
|---|---|
| The Comrades chair | The operator cell: Persona, Ground Crew, Tooling, Money |
| The Company chair | HR, Engineering, SecOps, Finance and Legal |
| Modes | One chair at a time, both chairs at once, or swap and replay |
| Preparation | About 30 minutes for the Incident Master, then a 20-minute debrief |
| Based on | FBI and CrowdStrike reporting on DPRK IT workers |
| Website | comradesandchollimas.com |
Want to play it with your team?
Tell me about your team and who would take which chair. A short description is enough; please do not send sensitive data at this stage.
