US DOJ Arrests Nine, Seizes $7.74M in Crackdown on North Korean Remote IT Worker Scheme Targeting 100+ Firms Including Crypto

57 posts • GPT (4.1 mini)

Updated Jul 3, 2025, 05:14 PM

The U.S. Department of Justice and FBI have announced the arrest of a U.S. national and charges against nine others in connection with a North Korean scheme involving remote IT workers. From 2021 to 2024, North Korean operatives posed as American tech workers using stolen identities—over 80 Americans' identities were compromised—to secure remote jobs at more than 100 U.S.

companies, including Fortune 500 firms and defense contractors. The scheme involved nearly 30 "laptop farms" across 16 states, where equipment was seized, including 137 computers. The operation allegedly generated approximately $16.5 million in revenue in 2025 alone, with $7.74 million seized by authorities. The illicit funds are believed to support North Korea's sanctioned weapons program. The conspirators used advanced tactics such as AI-generated fake voices, forged documents, and fake LinkedIn profiles to infiltrate companies. North Korean hackers also deployed sophisticated malware, including a macOS malware called "NimDoor," disguised as Zoom updates, to target crypto firms and steal sensitive data and cryptocurrency. The DOJ charged four North Koreans with wire fraud and money laundering related to stealing nearly $900,000 from an Atlanta-based blockchain startup. The scheme also involved Chinese, Taiwanese, and American facilitators. The coordinated nationwide crackdown included the seizure of 29 bank accounts, takedown of 21 fake websites, and confiscation of over 200 devices. Authorities warn that the operation not only defrauded companies but also led to the leakage of sensitive information, including U.S. military technology.

More breaking stories on DeepNewz — updated live.

#FBI #North Korean #American #Americans #Fortune 500 #North Korea #LinkedIn #NimDoor #Zoom #North Koreans #Atlanta #Chinese #Taiwanese

Financial Analysis

Associated Financial Markets

More financial news and market updates→

Related Prediction Markets

Federal employee charged as a result of DOGE investigation?

•

Sources

reuters.com(7)thehackernews.com(3)techcrunch.com(3)pcmag.com(2)

Lifeboat Foundation

@LifeboatHQ

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

Folha de S.Paulo

@folha

U.S. prosecutors accuse North Korea of infiltrating workers for revenue and stealing information

Clubic

@Clubic

A new malware campaign is targeting Mac users, especially those with a crypto wallet. Behind a fake Zoom update, North Korean attackers are ramping up their game to infiltrate systems and...