In a major operation targeting international cybercrime, four North Korean nationals have been accused of skimming nearly $1 million in cryptocurrency from unsuspecting companies. The individuals—identified as Kim Kwang Jin, Kang Tae Bok, Jong Pong Ju, and Chang Nam Il—face a five-count indictment for wire fraud and money laundering. They allegedly exploited the anonymity of remote employment to orchestrate their scheme using fraudulent identities, according to the U.S. Attorney's Office for the Northern District of Georgia.
This elaborate heist was a sophisticated operation, with the perpetrators securing IT positions at companies while hiding their true nationalities; they began their employment journey in the United Arab Emirates in 2019 and later infiltrated businesses based in Atlanta, Georgia, and Serbia respectively, during the span of December 2020 and May 2021. The deception was deep with stolen identities including one victim identified only as P.S. and another using the alias "Bryan Cho." Neither victimized company would have employed Kim Kwang Jin or Jong Pong Ju had their North Korean citizenship been known.
The accusations detail how trust, once garnered, was manipulated to gain access to their respective employers' digital assets, which led to Jong Pong Ju pilfering virtual currency valued at approximately $175,000 in February 2022, and Kim Kwang Jin making off with close to $740,000 in March 2022. This maneuver was facilitated by altering the source code of smart contracts at one of the companies where a defendant was employed. The illicit gains were then laundered through a virtual currency mixer, eventually transferred to exchange accounts controlled by co-conspirators Kang Tae Bok and Chang Nam Il but set up under aliases and backed by falsified Malaysian identification documents.
These charges, unveiled by a federal grand jury on June 24, punctuate the ongoing efforts of the Department of Justice's DPRK RevGen: Domestic Enabler Initiative, as they continue to clamp down on North Korea's subversive attempts to undermine sanctions and buttress their regime's unlawful arms programs, through such fraudulent activities the initiative, launched in March 2024, stands as a unified front spearheaded by the National Security Division and FBI Cyber and Counterintelligence Divisions, aiming to erode Pyongyang's financial underpinnings on American soil. The case is under prosecution by Assistant U.S. Attorneys Samir Kaushal and Alex R. Sistla, alongside Jacques Singer-Emery from the National Security Cyber Section.
