The US Department of Justice has announced indictments and arrests in a case involving North Korean IT workers allegedly hired with stolen US identities.
Prosecutors say at least 70 companies were infiltrated; the case also involved searches of more than 40 suspected computer farms and the seizure of over 180 computers.
Authorities arrested at least two people and searched more than 40 suspected “computer farms” in Texas. They seized more than 180 computers that the department said were sent by American companies to newly hired employees. The sites, owned by at least two American accomplices, were allegedly helping North Koreans work remotely and target American companies.
The companies that were hacked are in healthcare, computer support, retail, communications and manufacturing. They are located in Ohio and 16 other states, as well as the District of Columbia. The department did not release their names. According to the department, the employees allegedly made off with about $3 million in thefts.
The ministry says North Koreans are increasingly hiring American collaborators for various tasks. Sometimes, North Koreans themselves outsource entire jobs to foreigners. The workers use email addresses, fake LinkedIn profiles and social media accounts to hide their identities.
The FBI says thousands of North Korean state-controlled IT workers are working for Western companies, and the agency believes they pose a risk to national security and the companies' intellectual property.
According to the Justice Department, the scheme allows North Koreans to be hired by companies in the US and Europe, steal sensitive information and intellectual property, and then blackmail the companies for additional money.
CrowdStrike helped the FBI investigate and disrupt recent North Korean operations.
Top comments (0)