Bleepingcomputer U.S. Nationals Sentenced for Facilitating North Korean IT Fraud
Article Content
- •Knoot and Prince each received 18-month prison sentences for facilitating North Korean IT fraud.
- •The scheme impacted nearly 70 U.S. companies, generating over $1.2 million for North Korea.
- •The FBI is actively pursuing individuals involved in North Korea's IT worker infiltration schemes.
Matthew Issac Knoot and Erick Ntekereze Prince were sentenced to 18 months in prison for facilitating a scheme that allowed North Korean IT workers to fraudulently obtain remote jobs at U.S. companies. The duo hosted laptops at their residences, which were used by North Korean operatives to infiltrate nearly 70 U.S. firms, generating over $1.2 million in revenue for the DPRK. Knoot and Prince misrepresented their roles, enabling North Korean workers to appear as legitimate employees through remote desktop applications. The fraudulent activities caused significant financial losses, including over $1 million in remediation costs for victim companies. Both defendants were also ordered to forfeit substantial amounts of money earned from the scheme. The FBI continues to target such operations to disrupt North Korea's ability to circumvent sanctions and fund its regime.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Continue Reading
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…