Ukrainian National Sentenced to Five Years for Aiding North Korean IT Fraud
Summary
Oleksandr Didenko was sentenced to 60 months in prison for helping North Korean IT workers use stolen US identities and laptop farms to obtain jobs at US companies. He also agreed to forfeit more than $1.4 million.
Key points
- Didenko pleaded guilty to wire fraud conspiracy and aggravated identity theft in November 2025.
- Court documents say he operated upworksell[.]com, where overseas IT workers could buy or rent stolen US identities.
- The documents allege he managed 871 proxy identities and supported at least three laptop farms hosted at US residences.
- The workers used the identities to obtain jobs at 40 US companies, according to court documents.
- The domain was seized on May 16, 2024; Didenko was arrested in Poland and extradited to the US.
- He received 60 months in prison and 12 months of supervised release, and was ordered to pay more than $46,000 in restitution.
Article Details
- Event Type
- Criminal sentencing for facilitating North Korean IT workers' fraudulent employment using stolen U.S. identities and laptop farms.
- Impact
- Oleksandr Didenko was sentenced to 60 months in prison and 12 months of supervised release after pleading guilty to wire fraud conspiracy and aggravated identity theft. The operation enabled overseas workers to obtain work at 40 U.S. companies and transfer hundreds of thousands of dollars in earnings to foreign bank accounts. Didenko was also ordered to pay more than $46,000 in restitution and agreed to forfeit more than $1.4 million.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | upworksell[.]com | Domain operated by Didenko to facilitate the purchase or rental of stolen U.S. identities for fraudulent employment; seized on May 16, 2024. |
Threat Actors
Countries
North KoreaRelated: North Korea’s Fake Recruiters Feed Stolen Data to IT WorkersPolandOn May 16, 2024, the Upworksell.com domain was seized, and Didenko was arrested in Poland.UkraineThe man, Oleksandr Didenko, 29, of Kyiv, Ukraine, also known as Alexander Didenko, pleaded guilty in a US court in November 2025 to helping North Korean IT workers obtain employment at US companies.United StatesThe man, Oleksandr Didenko, 29, of Kyiv, Ukraine, also known as Alexander Didenko, pleaded guilty in a US court in November 2025 to helping North Korean IT workers obtain employment at US companies.