Virtual Event: Threat Detection & Incident Response Summit - Watch Now
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Ukrainian Gets 5 Years in US Prison for Aiding North Korean IT Fraud

Oleksandr Didenko sold the stolen identities of US citizens, allowing North Koreans to get hired using freelance work platforms.

Hacker

A Ukrainian national was sentenced to five years in a US prison for selling stolen identities to fraudulent North Korean workers and for facilitating the operation of laptop farms.

The man, Oleksandr Didenko, 29, of Kyiv, Ukraine, also known as Alexander Didenko, pleaded guilty in a US court in November 2025 to helping North Korean IT workers obtain employment at US companies.

According to documents presented in court, Didenko operated the Upworksell.com domain, allowing overseas IT workers to buy or rent the stolen identities of US citizens.

Using these identities, IT workers obtained employment using online freelance work platforms in California and Pennsylvania, which allowed them to create free accounts, advertise themselves, and bid on IT work contracts.

The court documents also allege that Didenko paid individuals in the US to host laptop farms at residences in Virginia, Tennessee, and California. He allegedly managed 871 proxy identities and supported the operation of at least three laptop farms.

Didenko’s activities enabled overseas individuals to access the US financial system without physically opening bank accounts in the US and to transfer employment income to foreign bank accounts.

Advertisement. Scroll to continue reading.

According to the documents presented in court, Didenko’s overseas clients received hundreds of thousands of dollars for their work at 40 US companies.

On May 16, 2024, the Upworksell.com domain was seized, and Didenko was arrested in Poland. He was extradited to the US on December 31, 2024.

In November 2025, he pleaded guilty to wire fraud conspiracy and aggravated identity theft and agreed to forfeit more than $1.4 million.

Didenko was sentenced to 60 months in prison and 12 months of supervised release and ordered to pay more than $46,000 in restitution.

Related: Romanian Hacker Pleads Guilty to Selling Access to US State Network

Related: 5 Plead Guilty in US to Helping North Korean IT Workers

Related: North Korea’s Fake Recruiters Feed Stolen Data to IT Workers

Related: Australian Man Sentenced to Prison for Wi-Fi Attacks at Airports and on Flights

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Joe Chen has become Chief Technology Officer at Trellix.

Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO.

SecureAuth has named Mark van Oppen as Chief Revenue Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.