Particle.news

Download on the App Store

US Disrupts North Korean IT Worker Network in Largest Crackdown Yet

Through multi-state raids, authorities disrupted a network relying on stolen identities, laptop farms, shell companies, proxy accounts to funnel illicit funds to North Korea’s weapons program.

This photo from the US District Court District of Massachusetts shows North Korean information technology workers on a multi-member team that the US Department of Justice says works with the North Korean government to fund its regime. Note: Parts of the image provided by the US District Court District of Massachusetts have been obscured.
FILE - The U.S. Department of Justice logo is seen on a podium before a press conference with Attorney General Pam Bondi, Tuesday, May 6, 2025, at the Justice Department in Washington. (AP Photo/Julia Demaree Nikhinson, file)
Image
Image

Overview

  • A federal grand jury indictment charges U.S. citizen Zhenxing “Danny” Wang with conspiracy to commit wire fraud, money laundering and identity theft for hosting laptop farms in New Jersey
  • DOJ unsealed indictments against two dozen individuals in the U.S., China, Taiwan and the UAE for facilitating North Korean IT worker placements at over 100 American companies
  • Investigators uncovered the use of stolen identities from more than 80 U.S. citizens to secure remote roles that generated over $5 million for Pyongyang and cost victims about $3 million
  • FBI searches across 14 states yielded approximately 137 laptops, 29 financial accounts and dozens of web domains used to launder wages to North Korea
  • Four North Korean operatives remain at large after separate charges for stealing nearly $900,000 in cryptocurrency from two U.S. firms