5 plead guilty to laptop farm and ID theft scheme to land North Koreans US IT jobs

bBarou

Wise, Aged Ars Veteran
110
The campaigns, which ramped up nearly five years ago, aim to steal millions of dollars in job revenue and cryptocurrencies to fund North Korean weapons programs.

Not that I condone this but I'm wondering is it stealing if they worked for it? Apparently not all of them engaged in hacking.
 
Upvote
-10 (25 / -35)
Post content hidden for low score. Show…
Post content hidden for low score. Show…

waldo22

Ars Scholae Palatinae
673
Subscriptor++
...defendants’ fraudulent employment schemes impacted more than 136 U.S. victim companies...

...and compromised the identities of more than 18 U.S. persons.
So, 137 companies? 19 people? I guess they may mean "at least 18 persons that we know about", but it's a strange way of saying it.
 
Upvote
17 (19 / -2)

metavirus

Ars Scholae Palatinae
703
Subscriptor++
If they are Trumpers they will be out by Xmas, Trump loves to exonerate white collar Trump scumbags. He loves scammers and fraudsters. But he is a man that respects the laws and our judiciary system.
lol — the scale of the crime here is too small potatoes. Like my grandpa sagely advised: Don’t steal, but if you do steal, steal big. When you steal big you can launder the assets in schemes and financial shenanigans that shield a big chunk from disgorgement
Edit: Also, too, note the demographics of the perps. Probably way too much melanin for Trump’s pardon panel.
 
Upvote
20 (21 / -1)

Fatesrider

Ars Legatus Legionis
25,165
Subscriptor
Only $2.2 million in revenue generate for the DPRK regime? Looks like a small operation, not likely to fund many weapons.
Really?

They're looking for useful IP and intelligence about the places they're employed by. They're disrupting the places they work for, or spreading disruption and malware and spyware among other places to get information.

If you think this is about raising money for the fucking North Koreans, you're deluded. This is all about making sure China gets what it asks for. China works through proxies almost all the time. NK is one of their favorite tools for Western espionage. And what NK gets from China is worth a a lot more to them than just money.
 
Upvote
7 (17 / -10)

graylshaped

Ars Legatus Legionis
68,031
Subscriptor++
Not that I condone this but I'm wondering is it stealing if they worked for it? Apparently not all of them engaged in hacking.
Fraud involves depriving a rightful owner of something via deception, and theft is on that naughty list. Burglary and robbery are also different crimes usually involving "stealing" something.
 
Upvote
6 (6 / 0)

tgeeks

Seniorius Lurkius
12
Subscriptor++
So, 137 companies? 19 people? I guess they may mean "at least 18 persons that we know about", but it's a strange way of saying it.

That was definitely written/approved by/insisted upon by lawyers. I used to work with Legal at my last job and got used to always future proofing statements with qualifiers like "at least" or "more than" or "to date" in case the numbers changed later. And Legal likely also insisted on saying "US Person" which is understood to mean either a citizen or a permanent resident (green card) vs a "US Resident" which could also include someone here on a student or work visa, etc.
 
Upvote
10 (10 / 0)
There’s an interesting podcast from BBC World Service called Cyber Hack and in the first two series they covered the North Korean group Lazarus (series 3 is Evil Corp) and it’s not just getting a job for a US company for a few mil it’s way bigger scale of operations.. the podcast is slightly over dramatised for my liking but not stopped me listening to it.. it’s been good

https://www.bbc.co.uk/sounds/brand/w13xtvg9

*edit to make it make more sense!
 
Last edited:
Upvote
7 (7 / 0)

JaneDoe

Ars Tribunus Militum
1,518
Subscriptor
How do you even contact the DPRK to even get this started.
I am pretty sure they contact you. And not like "this is Han Kim Dong from DPRK, would you like to undermine your country?" but more like middlemen, phrasing it as helping people out and make some bucks on the side while doing this.
 
Upvote
15 (15 / 0)

adamsc

Ars Praefectus
4,266
Subscriptor++
I feel like this is the real reason so many companies have leaned hard into Return to Office.

No, that’s about managers showing workers who’s in charge, with a side benefit of getting people to quit so they don’t have to take the heat for layoffs due to over-hiring.

This will be used to justify limiting remote work but they could get the same benefits with in-person interviews and other moves like that. Those measures, however, don’t have the benefit of prominently reinforcing social hierarchy so they’re not going to be popular with the executive class.
 
Upvote
22 (22 / 0)
Isn't the past tense of plead "pled", not pleaded?

Also "North APT38" should maybe just be APT38

Either / both are considered correct, but pleaded is widely regarded as being more formal so is usually the go to for describing legal context.

If only there were ways of quickly checking these things online! /s
 
Upvote
5 (5 / 0)

AusPeter

Ars Praefectus
5,174
Subscriptor
I am pretty sure they contact you. And not like "this is Han Kim Dong from DPRK, would you like to undermine your country?" but more like middlemen, phrasing it as helping people out and make some bucks on the side while doing this.
Yep, like:

Assistant need for a fully work from home business to earn $$$. All it requires is for you to plug in a couple of laptops1

1. And be a traitor to your country

The ad copy would be just another form of the requesting for assistance with the re-mailing jobs that scammers use all the time.
 
Upvote
9 (9 / 0)

phoenixNAPSTER

Smack-Fu Master, in training
43
I am amazed that companies can hire someone and not even know who they are and what country they live in. Contractors maybe, but employees?
I can only assume that this is why they needed actual human liaisons in the US to pull it off. It mentioned that a couple of them went in for drug testing, etc. That said, I do share your incredulity. As others have pointed out, such a small payout for such a life-altering crime.
 
Upvote
9 (9 / 0)

AusPeter

Ars Praefectus
5,174
Subscriptor
I am amazed that companies can hire someone and not even know who they are and what country they live in. Contractors maybe, but employees?
The whole point of the scheme that these people were convicted of was to provide a plausible point of contact inside the US, and help obscure the identities of the workers being employed. And the workers had a nation state assisting them behind the scenes that possibly could have provided "genuine" government issued photo IDs and/or SSN (although one of the convicted was charged with identity theft).
 
Upvote
7 (7 / 0)

AusPeter

Ars Praefectus
5,174
Subscriptor
Also curious as to whether any of them also stole sensitive data, placed malware in their employers’ networks, etc.

Seems like a way to potentially do that while also making some bucks.
The networks and IT systems of all of the companies that employed these NK IT workers are now likely to be compromised. The NKs may not even have done anything bad yet, and simply injected fake users that they could use as a backdoor at a later date. In cleaning up after the fact, I'm not even sure you could prove that you fully purged your systems of any NK work.
 
Upvote
13 (13 / 0)

TylerH

Ars Praefectus
4,986
Subscriptor
that the FBI seized in March from North APT38 actors

I'm guessing this is meant to say "North Korean APT38 actors"?


Only $2.2 million in revenue generate for the DPRK regime? Looks like a small operation, not likely to fund many weapons.
Stealing/compromising the identities of US citizens and getting access to dozens of potentially sensitive companies' internal docs/data is the real prize. This could just be a test or a decentralized pod. There could be a hundred other pods of 3-5 people orchestrating the same scheme out there still operating, for all we know (unlikely, but still). Then we'd be talking about hundreds of US citizens' identities, hundreds of companies, and potentially billions of dollars.

It also may not be for weapons, but rather for food/medicine or other things useful for the NK government/military to exert soft influence domestically. They have a hundred irons in the proverbial fire when it comes to funding via illicit means.
 
Upvote
5 (5 / 0)

mmiller7

Ars Legatus Legionis
12,376
I am pretty sure they contact you. And not like "this is Han Kim Dong from DPRK, would you like to undermine your country?" but more like middlemen, phrasing it as helping people out and make some bucks on the side while doing this.
Makes me wonder if that's how some of the endless "make money easy at home with your computer" scams might go. I have always seen those and immediately think "easy money = too good to be true = scam"
 
Upvote
4 (4 / 0)

Navalia Vigilate

Ars Praefectus
3,118
Subscriptor++
It's always surprising to me how little money will convince people to participate in major crimes.
Having volunteered to help people at the edges of society, some of whom are months behind on rent, utilities, and trying to figure out how to eat day to day. A couple of hundred dollars can suddenly look like a massive windfall when your stomach is eating you from the inside.

Now imagine latent health issues with no access to any medical care, perhaps a dependent, a aging family member.

We could erase poverty in the US with proper taxes and social safety nets. I wonder how much we would save in the direct and indirect benefits of keeping people away from crime and out of the emergency room?
 
Upvote
11 (11 / 0)

pagh

Ars Praetorian
530
Subscriptor++
It's always surprising to me how little money will convince people to participate in major crimes.
You should check out how much money gets USA politicians to do the same, though it’s legal for them thanks to the Supreme Court of USA.

That's not true! Bribery remains as illegal as ever.

But if a politician just happens to do something that benefits you, and you just happen to buy them, say, a giant $250,000 motorcoach, and you pinky promise that it had nothing to do with the favor they did for you, then that's not bribery. That's just gift giving between friends.
 
Upvote
6 (6 / 0)
I am pretty sure they contact you. And not like "this is Han Kim Dong from DPRK, would you like to undermine your country?" but more like middlemen, phrasing it as helping people out and make some bucks on the side while doing this.
Right, the DPRK just randomly sought out an active member of the US military. Just a typical cold call.
 
Upvote
-4 (0 / -4)