- A Ukrainian national received a five-year U.S. prison sentence for operating an identity theft scheme that aided North Korean IT workers.
- The fraudulent operation funneled salaries from U.S. companies, totaling over $1.4 million, to support North Korean weapons programs.
- Authorities uncovered a complex setup involving a dedicated website, proxy identities, and physical “laptop farms” to hide the workers’ locations.
- The scheme shows North Korea’s continued efforts to infiltrate the U.S. economy using evolving tactics to bypass detection.
A 29-year-old Ukrainian man, Oleksandr “Alexander” Didenko, was sentenced to five years in prison in the U.S. on February 20, 2026, for his role in a fraudulent IT worker scheme that financially benefited North Korea. Didenko pleaded guilty in November 2025 to wire fraud conspiracy and aggravated identity theft after he was apprehended in Poland and extradited to America.
He ran a website named Upworksell[.]com, which sold stolen U.S. identities to overseas IT workers who then secured jobs at U.S. companies. Consequently, their salaries were secretly sent back to finance North Korea’s military programs.
Didenko managed 871 proxy identities and also established physical “laptop farms” in several U.S. states to make remote workers appear domestic. As part of the scheme, he enabled payments through money transfer services instead of U.S. bank accounts.
U.S. Attorney Jeanine Ferris Pirro stated, “Today, North Korea is not only a threat to the homeland from afar, it is an enemy within.” She emphasized that the money directly supported Pyongyang’s munitions programs.
Despite this sentencing, the North Korean operation continues to evolve. Meanwhile, reports indicate IT workers are now using real, impersonated LinkedIn accounts to make fraudulent job applications appear more authentic.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
