DOJ Unveils North Korean IT Fraud Scheme
U.S. authorities seize devices and charge 12 in North Korean IT worker scam.
2 min read
The Department of Justice (DOJ) has uncovered a sophisticated scheme involving a dozen individuals who used falsified identities to secure remote IT positions in the United States, funneling revenue to the North Korean government. The operation, spanning from 2019 to July 2025, involved DPRK workers obtaining remote jobs by using stolen or fabricated identity documents, virtual private networks, and proxy infrastructure to appear as if they were U.S. citizens.
Seizures and Charges
On October 13, the DOJ announced coordinated actions in Texas and Ohio, resulting in the seizure of 187 computer devices and charges against the 12 individuals, most of whom are Chinese. Assistant Attorney General for National Security John A. Eisenberg emphasized that North Korea’s regime uses these schemes to fund illicit activities, including the development of weapons that could target the U.S. or its allies.
Impact on U.S. Companies
The DOJ reported that the scam affected over 70 American companies, generating $3 million in revenue for the North Korean regime. The scheme relied on U.S.-based facilitators who hosted and configured devices at their residences, allowing DPRK workers to access American IT systems remotely and transfer earnings to DPRK-controlled accounts.
Security and Identity Theft
These schemes not only redirect money to America’s enemies but also deprive American citizens of job opportunities. With a challenging job market, many companies fail to conduct thorough background checks, leaving victims of identity theft vulnerable. U.S. Attorney Ryan Raybould highlighted the broader implications of the investigation, stating that it is about a hostile foreign regime infiltrating American companies through stolen identities and covert access points.
Global Threats and Cybersecurity
North Korea is known for its oppressive regime, with reports of political imprisonment, forced labor, and systematic torture. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that North Korea engages in cyber warfare, with hackers allegedly stealing military secrets to support its nuclear program. The DOJ’s actions in dismantling these networks send a clear message that the U.S. will not allow its businesses to be exploited by foreign adversaries.
Source: PJ Media
