Particle.news

Download on the App Store

US Dismantles North Korean Remote IT Worker Network

The crackdown aims to sever multimillion-dollar revenue channels financing North Korea’s nuclear and missile programs.

Overview

  • The Department of Justice and FBI arrested U.S. national Zhenxing “Danny” Wang on June 30 and unsealed indictments against 16 co-conspirators for facilitating the scheme.
  • Investigators found that operatives used stolen identities of over 80 U.S. citizens to land jobs at more than 100 American firms and exfiltrate sensitive data, including ITAR-controlled source code.
  • Authorities executed searches of 21 sites hosting “laptop farms,” seizing 137 laptops as well as 29 financial accounts and dozens of fraudulent websites and domains.
  • Court filings show the network generated over $5 million for the North Korean regime while victim companies incurred at least $3 million in remediation and legal costs.
  • The action is part of the DPRK RevGen: Domestic Enabler Initiative, marking a major escalation in U.S. efforts to cut off Pyongyang’s illicit funding streams.