Particle.news

Download on the App Store

DOJ Charges Key Figures in North Korean IT Worker Fraud Scheme

The operation dismantled the infrastructure of a decades-long fraud network that covertly employed remote IT workers to finance North Korea's weapons development.

FILE - The U.S. Department of Justice logo is seen on a podium before a press conference with Attorney General Pam Bondi, Tuesday, May 6, 2025, at the Justice Department in Washington. (AP Photo/Julia Demaree Nikhinson, file)
Image
Image
North Korean Supreme Leader Kim Jong Un in a press conference in June 2024.

Overview

  • U.S. authorities arrested New Jersey native Zhenxing “Danny” Wang and indicted Kejia Wang alongside six Chinese nationals, two Taiwanese citizens and five North Koreans in connection with the remote IT worker scheme.
  • Federal agents executed multi-state raids on more than two dozen laptop farms, seizing over 200 computers, web domains and financial accounts used to obscure worker identities and launder salaries.
  • From 2021 to 2024, operatives stole the identities of more than 80 Americans to infiltrate over 100 U.S. companies, generating upwards of $5 million for Pyongyang and causing $3 million in corporate losses.
  • Prosecutors contend the network also diverted at least $900,000 in cryptocurrency and accessed sensitive ITAR-controlled data from an AI-focused defense contractor.
  • The DOJ’s action follows years of similar prosecutions targeting North Korea’s sanctions-evasion tactics and underscores ongoing risks from remote-worker infiltration.