Two U.S. Nationals Sentenced for Facilitating North Korean IT Worker Scheme

· Original article ↗

Summary

Two U.S. nationals were sentenced to 108 and 92 months for helping overseas IT workers obtain jobs at more than 100 U.S. companies using stolen identities and laptop farms. Authorities say the scheme generated over $5 million; some workers accessed sensitive, ITAR-rele

Key points

  • Kejia Wang and Zhenxing Wang were sentenced to 108 and 92 months in prison after pleading guilty to offenses including wire fraud and money laundering conspiracy.
  • Authorities said the scheme placed overseas IT workers in roles at more than 100 U.S. companies and generated over $5 million for the DPRK.
  • The defendants used stolen identities of more than 80 Americans and hosted company-issued laptops in the U.S. so workers abroad could access them remotely.
  • Investigators said keyboard-video-mouse switches helped enable remote control of the laptops and bypass employer location checks.
  • Shell companies, including Hopana Tech LLC and Independent Lab LLC, were used to present workers as U.S.-based employees and route payments.
  • Investigators found that some workers accessed sensitive corporate information, including source code and ITAR-controlled data from a defense contractor.
  • Authorities said they recovered more than $400,000 and seized over 70 laptops and remote-access devices; the investigation continues, and the State Department announced a reward of up to $5 million for information.

Article Details

Event Type
Sentencing of two U.S. nationals for facilitating a North Korea-linked IT worker scheme involving fraudulent remote employment, identity theft, and money laundering.
Impact
The scheme placed overseas workers in roles at more than 100 U.S. companies and generated more than $5 million for the DPRK. Some workers accessed sensitive corporate information, including source code and ITAR-controlled data. The two defendants were sentenced to 108 and 92 months in prison; investigations into related activity remain ongoing.

Threat Actors

Countries

Industries