Cybercrime Two North Korean IT Worker Scheme Facilitators Jailed in the US Kejia Wang and Zhenxing Wang compromised the identities of dozens of US persons to help land jobs at over 100 companies. Ionut ArghireApril 17, 2026
Cybercrime Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms. Ionut ArghireFebruary 23, 2026
Nation-State North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers. Eduard KovacsDecember 19, 2025
Cybercrime 5 Plead Guilty in US to Helping North Korean IT Workers Audricus Phagnasay, Jason Salazar, Alexander Paul Travis, Erick Ntekereze, and Oleksandr Didenko have pleaded guilty. Eduard KovacsNovember 17, 2025
Nation-State North Korea’s Fake Recruiters Feed Stolen Data to IT Workers North Korean threat actors pose as recruiters to steal developers’ identities and supply them to fraudulent IT workers. Ionut ArghireSeptember 26, 2025
Tracking & Law Enforcement US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam Christina Chapman was sentenced to prison for helping North Korean IT workers infiltrate US companies and running a laptop farm for them. Ionut ArghireJuly 25, 2025
Tracking & Law Enforcement US Storms 29 Laptop Farms in Crackdown on North Korean IT Worker Schemes The US has made 29 searches of known or suspected laptop farms supporting North Korean individuals posing as US IT workers. Ionut ArghireJuly 1, 2025
Tracking & Law Enforcement US Seeks Forfeiture of $7.74M in Cryptocurrency Tied to North Korean IT Workers The US is seeking the forfeiture of $7.74 million in cryptocurrency in frozen wallets tied to North Korean fake IT workers schemes. Ionut ArghireJune 9, 2025
Incident Response SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers SentinelOne has shared some information on the types of threat actors that have targeted the security firm recently. Eduard KovacsMay 1, 2025
Cybercrime Man Helped Individuals in China Get Jobs Involving Sensitive US Government Projects Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme. Ionut ArghireApril 17, 2025
Nation-State North Korean Fake IT Workers Pose as Blockchain Developers on GitHub North Korean fake IT workers are creating personas on GitHub to land blockchain developer jobs at US and Japanese firms. Ionut ArghireMarch 5, 2025
Malware & Threats Freelance Software Developers in North Korean Malware Crosshairs ESET says hundreds of freelance software developers have fallen victim to North Korean hackers posing as recruiters. Ionut ArghireFebruary 21, 2025
Nation-State North Korean Fake IT Workers More Aggressively Extorting Enterprises North Korean fake IT workers are more aggressively extorting their employers in response to law enforcement actions. Ionut ArghireJanuary 24, 2025
Cybercrime US Charges Five People Over North Korean IT Worker Scheme The US has announced charges against five individuals involved in a fake IT workers scheme to funnel funds to North Korea. Ionut ArghireJanuary 24, 2025
Nation-State US Announces Sanctions Against North Korean Fake IT Worker Network The US Treasury has sanctioned two individuals and four entities involved in the North Korean fake IT worker scheme. Ionut ArghireJanuary 17, 2025
Fraud & Identity Theft Fake IT Workers Funneled Millions to North Korea, DOJ Says The Justice Department announced indictments against 14 North Koreans for involvement in a scheme to pose as remote IT workers to violate sanctions and... Ryan NaraineDecember 12, 2024
Nation-State North Korea Deploying Fake IT Workers in China, Russia, Other Countries The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US. Ionut ArghireNovember 25, 2024
Cybercrime North Korean Fake IT Workers Extort Employers After Stealing Data North Korean nationals posing as IT workers have been extorting their employers after gaining insider access. Ionut ArghireOctober 18, 2024