The U.S. Department of Justice (DOJ) has charged four North Korean nationals with wire fraud and money laundering. The individuals allegedly posed as remote IT workers for a blockchain startup in Atlanta and a Serbian virtual token company, stealing nearly $1 million in cryptocurrency to fund North Korea's illicit programs.
North Korean Operatives Indicted For Crypto Theft
Four North Korean nationals—Kim Kwang Jin, Kang Tae Bok, Jong Pong Ju, and Chang Nam Il—have been indicted in Georgia for their involvement in a sophisticated scheme. They are accused of using fake and stolen identities to secure remote IT positions at a Buckhead-based blockchain security startup, Starter Labs, and a Serbian virtual token company. Once embedded, they exploited their access to steal significant sums of cryptocurrency.
The Modus Operandi
-
Infiltration: The group, initially operating from the United Arab Emirates in 2019, secured remote IT jobs between late 2020 and mid-2021. They used fraudulent documents, including stolen and fabricated IDs, to conceal their North Korean citizenship.
-
Exploitation: In February 2022, Jong allegedly siphoned approximately $175,000 in crypto. The following month, Kim exploited smart contract source code to steal an additional $740,000.
-
Laundering: The stolen funds were then laundered through mixers and transferred to exchange accounts controlled by Kang and Chang, which were set up using fraudulent Malaysian IDs.
Impact On Businesses And National Security
Marlon Williams, owner of Starter Labs, recounted how he trusted the remote workers, even promoting one to Chief Technology Officer, only to discover they were North Korean agents who stole over $1.1 million from his company. U.S. Attorney Theodore S. Hertzberg highlighted this as a "unique threat" to businesses hiring remote IT workers, emphasizing the difficulty in vetting individuals who use sophisticated fake identities.
John A. Eisenberg, Assistant Attorney General for National Security, stated that these schemes are designed to evade sanctions and fund the North Korean regime's illicit programs, including its weapons development. The case is part of the DOJ’s DPRK RevGen: Domestic Enabler Initiative, launched in 2024 to target North Korea’s illicit revenue streams.
Broader DOJ Crackdown
This indictment is part of a larger DOJ effort against North Korean illicit activities. Recent actions include:
-
Coordinated raids across 16 states, seizing nearly 30 financial accounts, over 20 fraudulent websites, and approximately 200 computers from "laptop farms" used by North Korean operatives.
-
A civil forfeiture complaint filed last month to seize $7.74 million in crypto allegedly earned by North Korean IT workers posing as remote blockchain contractors.
Authorities are offering a $5 million reward for information leading to the capture of the four indicted individuals. The DOJ advises companies to thoroughly vet all potential employees and consider hiring American workers to mitigate such risks.
Sources
-
North Korean IT Workers Charged in $915K Crypto Theft, DOJ Says, Cointelegraph.
-
Buckhead business owner says remote workers he trusted turned out to be North Koreans who stole $1M, Yahoo.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.