Maryland Man Sentenced for Serving to North Korea Infiltrate US Tech Companies – Decrypt

A person in Maryland has change into the newest American sentenced for serving to North Korea to covertly place IT staff inside U.S. firms.

Minh Phuong Ngoc Vong, 40, acquired a 15-month jail sentence and three years of supervised launch on Thursday.

Between 2021 and 2024, Vong used false credentials to safe jobs with a minimum of 13 U.S. firms. These employers collectively paid him greater than $970,000 for software program improvement work that was really carried out by an abroad co-conspirator generally known as “John Doe” or by different overseas operatives, all regarded as North Korean residents.

A number of of those firms additionally contracted Vong’s companies to U.S. authorities companies, together with the Federal Aviation Administration (FAA). Consequently, the conspirators gained unauthorized entry—working from China—to delicate authorities techniques.

North Korea’s infiltration marketing campaign

His sentencing comes amid a wide-ranging effort by North Korea to embed staff in U.S. firms together with crypto corporations.

U.S. makes an attempt to counter the infiltration marketing campaign embrace costs levelled in January in opposition to two North Korean nationals and three facilitators, in addition to nationwide efforts to dismantle “laptop computer farms” launched in June. These setups, situated in U.S. houses, enable abroad North Korean IT staff to disguise their true areas by remotely controlling laptops issued by American firms to supposedly U.S.-based workers.

In December 2024, a federal courtroom in St. Louis indicted 14 North Koreans for a long-running scheme to extort U.S. firms and funnel cash to Pyongyang’s weapons packages.

And in July, Tiktok influencer Christina Chapman was sentenced to greater than eight years in jail for stealing the identities of 68 People and serving to overseas IT staff use them to acquire jobs at greater than 300 firms. Investigators say the scheme generated $17 million despatched again to North Korea.

“North Korea stays intent on funding its weapons packages by defrauding U.S. firms and exploiting American victims of identification theft, however the FBI is equally intent on disrupting this huge marketing campaign and bringing its perpetrators to justice,” assistant director Roman Rozhavsky of the FBI Counterintelligence Division mentioned following the June operation.

“North Korean IT staff posing as U.S. residents fraudulently obtained employment with American companies so they might funnel a whole bunch of tens of millions of {dollars} to North Korea’s authoritarian regime. The FBI will do the whole lot in our energy to defend the homeland and shield People from being victimized by the North Korean authorities, and we ask all U.S. firms that make use of distant staff to stay vigilant to this refined risk.”

Vong labored with Doe, believed to be a North Korean dwelling in Shenyang, China, roughly 460 kilometers from the North Korean border. Doe submitted purposes underneath Vong’s identify, falsely claiming a bachelor’s diploma and 16 years of software program improvement expertise. In a minimum of one case, he utilized to a Virginia-based firm that required U.S. citizenship as a situation of employment.

As soon as Vong secured a place, he supplied his credentials to the abroad staff, who carried out the job remotely.

The Virginia firm finally assigned Vong to work as a contractor for the FAA on a software program software utilized by a number of U.S. companies to handle delicate nationwide protection data, in keeping with the Justice Division. Doe carried out the work underneath Vong’s identification, producing greater than $28,000 in earnings, a part of which Vong transferred overseas.

Vong entered a plea settlement on January 30, 2023.

North Korean hacks

Employment infiltration is one amongst a number of income streams for North Korea’s cyber operations. One other is having access to firms holding crypto by means of employment after which hacking their wallets.

The nation’s crypto-hacking teams have stolen greater than $2 billion in 2025 alone, in keeping with blockchain analytics agency Elliptic, bringing complete stolen digital belongings lately by the regime to greater than $6 billion. The funds, from hacks together with these of crypto exchanges Bybit and Upbit, finance North Korea’s nuclear and missile packages.