DoJ Busts Up Another Multinational DPRK IT Worker Scam

A multi-year fraudulent remote-work campaign linked to North Korea used assumed identities, stolen IDs, and intermediaries to secure at least 64 US IT jobs; company laptops were routed through US-based "laptop farms," remote-access software enabled DPRK workers to perform duties, and payments were laundered back to DPRK. The DOJ has indicted multiple individuals (two North Koreans, two Americans, and a Mexican facilitator), launched the DPRK RevGen initiative to dismantle such operations, and highlighted the use of identity fraud, invoicing schemes, remote access, and money laundering as core TTPs.