Summary: A group involving two North Koreans, two Americans, and a Mexican has been indicted for orchestrating an IT worker scam that exploited fake identities to secure jobs with numerous American companies. The scheme, which lasted from April 2018 to August 2023, funneled significant earnings back to North Korea, potentially funding its nuclear programs. The Department of Justice has initiated efforts to dismantle such operations, resulting in several arrests and ongoing investigations.
Threat Actor: North Korean hackers | North Korean hackers
Victim: American companies | American companies
Keypoints :
- Two North Koreans and three accomplices were indicted for an elaborate IT worker scam.
- The operation involved fake identities and laptop farms to facilitate remote work for North Koreans.
- Profits from the scam were laundered through Chinese bank accounts, with potential links to funding North Korea’s missile programs.
Source: https://www.darkreading.com/threat-intelligence/doj-multinational-dprk-it-worker-scam