Two U.S. Facilitators Sentenced for North Korean IT Worker Laptop-Farm Scheme
Summary
Two U.S. nationals received 18-month prison sentences for hosting laptop farms that let North Korean IT workers pose as U.S.-based employees, affecting nearly 70 companies and generating over $1.2 million for the regime, according to authorities.
Key points
- Matthew Issac Knoot and Erick Ntekereze Prince were each sentenced to 18 months in prison for facilitating the scheme.
- They hosted laptops at their residences and installed remote desktop applications so North Korean workers could appear to work from the United States.
- Authorities said the separate schemes affected nearly 70 U.S. companies and generated a combined $1.2 million for North Korea.
- Prince’s company, Taggcar, supplied IT workers to U.S. companies from June 2020 through August 2024; he pleaded guilty to wire fraud conspiracy.
- Authorities said Knoot made false statements and destroyed evidence after the FBI searched his home.
Article Details
- Event Type
- Sentencing of two U.S.-based facilitators of a North Korean IT-worker scheme
- Impact
- The schemes affected nearly 70 U.S. companies and generated more than $1.2 million for the North Korean regime, according to the article. Officials said the workers used the laptop farms to appear U.S.-based while working remotely; the Justice Department said the scheme compromised U.S. corporate networks.
People
Brett LeathermanLead of the FBI’s Cyber Division; commented on efforts to disrupt North Korea’s IT-worker scheme and hold U.S.-based facilitators accountable.John A. EisenbergAssistant attorney general for national security; commented on the defendants’ role in enabling North Korea’s scheme and the National Security Division’s pursuit of those involved.
Threat Actors
Erick Ntekereze PrincePleaded guilty to wire fraud conspiracy for his involvement in the North Korean IT-worker scheme and was sentenced. His company, Taggcar, supplied IT workers to U.S. companies from June 2020 through August 2024.Matthew Issac KnootSentenced for hosting a laptop farm that helped North Korean IT workers appear to be based in the United States. The article says workers linked to his laptop farm transferred payments to him and accounts associated with North Korean and Chinese nationals.