US makes headway on North Korean cyber threat crackdown

Multiple victories against North Korea's fake IT worker scheme and cryptocurrency exfiltration activities have been achieved by the U.S. Department of Justice, with five individuals admitting guilt over their participation in the IT worker scam and over $15 million of cryptocurrency heist proceeds sequestered from North Korean state-sponsored threat operation APT38, reports CyberScoop.

Ukrainian national Oleksandr Didenko, who pleaded guilty to wire fraud conspiracy and aggravated identity theft over the theft and sale of U.S. citizen identities to support a years-long IT worker scheme that infiltrated 40 U.S. firms, will forfeit over $1.4 million before being sentenced in February. Moreover, U.S. nationals Jason Salazar, Alexander Paul Travis, and Audricus Phagnasay admitted to committing wire fraud conspiracy after giving North Korean IT workers American identities, while another U.S. national Erick Ntekereze Prince pleaded guilty to the same charge after enabling North Koreans to infiltrate U.S. companies between June 2020 and August 2024.

"These actions demonstrate the department's comprehensive approach to disrupting North Korean efforts to finance their weapons program on the backs of Americans. The department will use every available tool to protect our nation from this regime's depredations," said Assistant Attorney General for National Security John A. Eisenberg.