Ukrainian man jailed for identity theft that helped North Koreans get jobs at US companies

A federal court in the United States has handed down a five-year prison sentence to a Ukrainian national for his involvement in a longstanding identity theft scheme. This operation facilitated fraudulent employment opportunities for North Korean laborers at various U.S. companies. Oleksandr Didenko, a 29-year-old from Kyiv, was charged by U.S. prosecutors in 2024 for orchestrating a plan that provided North Koreans with stolen identities of American citizens. This allowed them to secure jobs and earn wages, which were subsequently transferred back to Pyongyang. The funds were reportedly used to support North Korea's controversial nuclear weapons program, which is under international sanctions. This case is part of a broader pattern of convictions targeting individuals aiding North Korea's so-called "IT worker" schemes. Security experts have labeled these North Korean operatives as a significant threat to businesses in the U.S. and the West, as they breach U.S. sanctions, steal sensitive corporate information, and later extort victim companies to suppress the release of confidential data. According to the Justice Department, Didenko operated a website named Upworksell, which enabled individuals, including North Koreans, to purchase or lease stolen identities to gain employment with American firms. He managed over 870 stolen identities, and in 2024, the FBI seized Upworksell, redirecting its traffic to federal servers. Didenko was arrested by Polish authorities and extradited to the U.S., where he pleaded guilty. The U.S. Department of Justice revealed that he also compensated individuals to host laptops in their homes across California, Tennessee, and Virginia. These setups, referred to as "laptop farms," allowed North Koreans to work remotely as if they were present in the United States. Security firm CrowdStrike reported a notable increase in the infiltration of North Korean workers into various companies, often taking roles as remote developers or in technical software engineering positions. This scheme exemplifies how the North Korean regime seeks to enrich itself despite being cut off from the global financial system due to sanctions. Additionally, North Korean operatives have been known to impersonate recruiters and venture capitalists, attempting to deceive high-profile victims into granting access to their computer systems, including cryptocurrency accounts.