Five Plead Guilty in North Korean IT Job Schemes

The U.S. Department of Justice announced that five individuals have pleaded guilty to charges related to schemes that enabled North Korean operatives to secure remote IT jobs at American companies and facilitated cryptocurrency thefts, generating millions for the regime in violation of international sanctions. The guilty pleas, disclosed over the past week in federal courts across Georgia, Florida, and the District of Columbia, involved four U.S. nationals and one Ukrainian citizen who assisted the hacking group known as APT38, also called the Lazarus Group, tied to North Korea's Reconnaissance General Bureau.

The defendants helped North Korean actors infiltrate more than 136 U.S. organizations by providing false or stolen identities and hosting company-issued laptops at residences in states including Georgia, Florida, Virginia, Tennessee, California, and Arizona. This created the illusion that the workers were based domestically, allowing them to pass employer vetting processes, including drug tests in some cases. The schemes operated from September 2019 through August 2024, with salaries totaling over $2.2 million funneled primarily overseas to support North Korea's weapons...