Virtual Event: Threat Detection & Incident Response Summit - Watch Now
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Man Helped Individuals in China Get Jobs Involving Sensitive US Government Projects

Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme.

A Maryland man admitted in court to obtaining remote IT work at US companies on behalf of individuals located in China.

As part of the scheme, the man, Minh Phuong Ngoc Vong, 40, of Bowie, defrauded 13 US companies that hired him as a remote software developer, by allowing others to use company-provided assets to do the IT work and receive payment for it.

To secure the jobs, Vong provided false statements about his education, experience, and training, falsely claiming that he had a Bachelor of Science degree and 16 years of experience in software development.

In January 2023, he submitted such a false resume with a Virginia-based technology company, for a web application developer role that required US citizenship. After verifying his identity and citizenship in March 2023, the company hired him.

Vong was assigned work on a contract for the Federal Aviation Administration (FAA) for an application that US government agencies used to manage sensitive information related to national defense.

The company provided Vong with a laptop and the FAA authorized the issuance of a Personal Identity Verification (PIV) card to him, to access government facilities and systems.

Advertisement. Scroll to continue reading.

After landing the job, Vong, who had no experience in software development, installed remote access software on the laptop so that a foreign national living in Shenyang, China, known as John Doe, and William James, could access the device and conceal his location.

Between March 2023 and July 2023, Doe performed software development work from his location in China, for which the Virginia-based company paid more than $28,000 in wages to Vang, who sent portions of the funds to Doe and other conspirators.

Vong admitted in court to engaging in similar schemes between 2021 and 2024 to obtain employment at 13 US companies on behalf of Doe and other overseas conspirators.

Some of these companies contracted the services to US government agencies, “which unknowingly granted Vong’s co-conspirators access to sensitive US government systems, which they accessed from China,” the Department of Justice notes.

Vong pleaded guilty to wire fraud conspiracy and faces up to 20 years in prison. He is scheduled for sentencing on August 28.

Over the past couple of years, the US government has taken steps to disrupt “laptop farm” operations that enabled individuals overseas to secure remote jobs at US companies.

Some of these laptop farms were employed in North Korean fake IT worker schemes that funneled tens of millions of dollars to the Pyongyang regime. Hundreds of companies are believed to have been affected and the US has sanctioned or charged dozens of individuals involved.

Related: North Korean Fake IT Workers Pose as Blockchain Developers on GitHub

Related: North Korean Fake IT Workers More Aggressively Extorting Enterprises

Related: Fake IT Workers Funneled Millions to North Korea, DOJ Says

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Joe Chen has become Chief Technology Officer at Trellix.

Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO.

SecureAuth has named Mark van Oppen as Chief Revenue Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.