Tag: north korea

FBI shuts down over 40 North Korean laptop farms used by fake remote workers — over 200 devices seized in Texas, although no arrests were made so far

The FBI has dismantled a major North Korean laptop farm operation in the U.S. with the help of CrowdStrike, which assisted in the identification and disruption of these networks. According to The New York Times, the agency shut down over 40 laptop farms in Texas, resulting in the seizure of over 200 devices. No arrests have been made so far, as the authorities wanted to take down the operations as soon as possible and did not wait for prosecutors to file charges against those involved, although they also warned that they could face criminal penalties if they continue to be involved with remote fraud.

North Korea has been using fake remote workers to earn income despite the economic sanctions placed against the hermit kingdom. It has been reported that it earns around $500 million a year under this scheme, which affects both startups and Fortune 500 companies. Amazon’s IT department actually caught one North Korean infiltrator after it noticed a 110ms keyboard input lag, betraying their distant location.

The U.S. has been clamping down on this scheme since last year, after it shut down 29 North Korean laptop farms across 16 states that were facilitating the employment of North Korean IT workers across over a hundred U.S. companies. Four U.S. citizens and a Ukrainian national were convicted over scams like this in November 2025, with the Justice Department unsealing indictments against two U.S. citizens and 10 China-based North Koreans recently. Prosecutors said that the last group defrauded more than $3 million from 70 companies over a span of six years from 2019, and that the identities of two more individuals involved in the case remain under seal.

Despite the number of networks that U.S. authorities have been able to shut down since last year, CrowdStrike’s Adam Meyers, who’s in charge of the company’s counter adversary operations, says that this scheme is “increasing both in prevalence and complexity.” He noted that it’s difficult to know how truly widespread the problem is and that even though CrowdStrike has identified an average of two new cases daily last month, it was most probably just the tip of the iceberg.

Facilitators are the one crucial aspect that North Korea’s operations rely on. These are people based in the United States who help bypass security measures by hosting the work laptops that companies send to the fraudulent North Korean IT workers to make it appear as if they’re based in the country. While the job looks like easy money from that start, it would eventually become more complicated as the operation progresses. “They get kind of hooked on it initially, and then more gets asked of them, and they’re kind of in too deep at that point,” Meyers told the publication.

Keep reading

Chainalysis Used Ai To Trace The $387m Bitget Hack Back To North Korea

In a recent blog post, blockchain analytics firm Chainalysis attributed the $387 million theft from cryptocurrency exchange Bitget to North Korean state-sponsored hackers. The firm used a combination of its’ AI-powered cryptocurrency analysis and its’ traditional investigative methods to track the stolen funds, moving them across multiple blockchains. Importantly, although the firm used technology to enhance the analysis of the data, it was human investigators who ultimately attributed the theft and controlled the output of their analysis.

After the breach, the attackers had been using more sophisticated techniques for laundering the stolen assets, spreading them through cross-chain liquidity protocols, messaging platforms, instant swap services, as well as specialized laundering infrastructure. The scale of such attempts highlights the attackers’ high level of experience in managing a large-scale cybercrime operation and in evading detection by blockchain forensics experts, writes Decrypt.

Stolen XRP was handled differently by the hackers and after some time it was converted into Bitcoin through cross-chain liquidity protocol and then extracted from the pool on the other side of the trade. This cross-chain arbitrage was used by hackers not only to convert very traceable asset into something else but also to make it as anonymous as possible by hopping from one protocol to another. The activity of extracting tens of millions of dollars in assets through this method took approximately 36 hours.

We previously highlighted that the attack bore similarities to past attacks conducted by DPRK cyber crime operators, as identified by Bitget CEO Gracy Chen. Blockchain analytics firm Elliptic also assessed the involvement of North Korean cyber crime operators in the theft to be “highly likely”.

The money laundering activity is very transparent and is being carried out on public blockchains. The attacker moved parts of the funds to Zcash’s shielded pool in order to use the privacy features. However, how swap services react to these transactions varies greatly. Near Intents for example rejected over $50m in hacker-linked transactions. They got hacked days later though. Thorchain on the other hand continued to process the suspect transactions.

However, stablecoin issuers such as Circle and Tether were able to prevent $318,000 in stablecoins that were siphoned off in the hack from entering circulation. The move highlights the power of centralized control of widely held stablecoins even as the broader decentralized trading environment continues to facilitate hacker activity.

Keep reading

North Korea’s Underground Nuclear Tests at Mount Mantap May Have Triggered 1400 Earthquakes: STUDY

The planet is still reeling from North Korea’s Nuclear tests.

Between 2006 and 2017, North Korea carried out six underground nuclear tests in the Punggye-ri test site.

This may read like irrelevant facts from the past, but seismic data from 2008 to 2025 detected no less than 1,399 earthquakes around the mountain.

It is suspected that the underground explosions may have reactivated long-dormant faults, according to a new scientific study.

The Korea Herald reported:

“An international research team led by Pusan National University Geological sciences Professor Kim Kwang-hee made the finding after analyzing 17 years of continuous seismic waveform data collected in South Korea and northeastern China between 2008 and May last year. The team included researchers from four Chinese institutions: Chengdu University of Technology, the Chinese Academy of Sciences, the China Earthquake Administration and Shandong University.

In the study, titled ‘Nuclear tests at Mt. Mantap have reactivated intraplate faults’, the researchers tracked changes in seismic activity around Mantapsan in Kilju, North Hamgyong Province, where the North conducted all six of its nuclear tests.”

Keep reading

Trump Must Not Let Washington’s Korea Hawks Intimidate Him Again

One of the great foreign policy disappointments of Donald Trump’s first term was the failure to advance his initial promising initiative to begin normalizing relations with the Democratic People’s Republic of Korea (DPRK).  Trump had abandoned the threats and bluster toward Pyongyang that marked his early months in office.  Instead, he moved to open a personal dialogue with North Korean dictator Kim Jong Un and facilitate productive negotiations on several important issues.  That approach led to an unprecedented U.S.-DPRK summit meeting in Singapore on June 12, 2018 and, later on, to a famous sight: the U.S. president crossing the Demilitarized Zone from South Korea into the communist North on June 29, 2019, to hold a brief chat with Kim.

Unfortunately, Trump failed to prevent hawks from both parties in Congress and in the overall national security establishment from sabotaging such conciliatory efforts.  Indeed, the president made a fatal blunder of his own by appointing the rabidly hawkish John Bolton as his National Security Advisor.  Congressional opponents of any meaningful relationship between the United States and the DPRK also excoriated Trump for moving to reduce Washington’s confrontational stance toward Pyongyang.

Indeed, hardliners in Congress and the broader policy community denounced the president for his willingness even to interact with Kim. The United States gave the odious dictator a huge boost in prestige, critics contended, merely by affording him a face-to-face meeting with the president and treating him as an equal. “In his haste to reach an agreement, President Trump elevated North Korea to the level of the United States while preserving the regime’s status quo,” intoned House minority leader Nancy Pelosi.

Despite that bruising political experience during his first term, Trump has indicated that he would be receptive to a new dialogue with the North Korean leader before the end of 2026.  “I get along with him well,” Trump stated.  “And you know what? The fact that I get along with him, that’s a very good thing, not a bad thing.”

On the delicate and difficult issue of relations with North Korea, Trump’s instincts are correct.  A new summit meeting would be a useful first step toward ending the dangerous policy rigidity that, except for Trump’s all-too-brief interlude, has plagued the U.S. stance toward North Korea for decades.

To achieve a constructive breakthrough, however, the president must go on the offensive against a host of vitriolic, often partisan, detractors.  Even his mild new outreach to Pyongyang is already drawing fire akin to the ideological and partisan attacks that doomed his efforts in 2018 and 2019.  The rhetoric of Sen. Jack Reed (D-RI) was typical. “Kim Jong Un is not, I think, terribly impressed with Donald Trump.  And withdrawing forces from Korea, canceling exercises, plays into his game.”  Trump in a Truth Social post the previous Sunday stated that he told Secretary of Defense Pete Hegseth to “substantially reduce” planned joint military exercises alongside South Korean forces.

The Wall Street Journal’s editorial board echoed Reed’s opposition to Trump’s conciliatory gestures to Pyongyang. “President Trump is nothing if not impulsive, and his latest brainstorm is to rekindle his courtship of North Korean dictator Kim Jong Un.”  The Journal’s editors were especially annoyed that Trump had cited his “very good relationship” with Kim and had contended that U.S. military exercises with South Korea “send a signal that is totally inappropriate and hostile, to a Country that, as long as Donald J. Trump has been President, has been unthreatening and respectful.”

The editors expressed alarm at the president’s approach.  “This will reinforce the growing belief in Asia and Europe that the U.S. is becoming an unreliable ally,” they fumed.  “It may also increase the calls in the South for Seoul to develop its own nuclear deterrent.”

Despite the shrill criticism, Trump’s latest initiative actually is a cautious, overdue effort to jump-start meaningful diplomacy with Pyongyang.  The real danger is that such a modest, conciliatory effort will be too little, too late.

Keep reading

North Korea Preparing To Send 50,000 More Troops To Russia — First Trains Already Moving West, German Intelligence Reports

Germany’s Deutsche Welle reported Friday, citing German defense intelligence sources, that North Korea could deploy as many as 50,000 more troops to Russia for use in the Ukraine war. Ukrainian military intelligence (GUR) circulated similar assessments to allied media and claimed the first troop trains had already left Russia’s Far East bound for the western theater of operations.

Ukraine’s President Volodymyr Zelensky said Saturday that Ukrainian intelligence had assessed a deployment decision had already been made, placing the number somewhere between 30,000 and 50,000 additional soldiers. He called the development a serious escalation of the Pyongyang-Moscow military partnership.

Officials in Ukraine, the United States, and South Korea have long assessed that North Korea began sending troops to aid Russian operations in late 2024. Those soldiers reportedly took heavy casualties in frontal assault operations in the Kursk and Zaporizhzhia sectors. Neither Russia nor North Korea has offered comment on the new reports. Neither government has ever officially acknowledged the original deployments.

The arrangement serves both sides in clear ways. Moscow gains additional infantry for its high-attrition offensive operations at a time when manpower has become a central constraint in the war. North Korea, in return, receives battlefield experience, military hardware, and economic support from Moscow — a deepening relationship that Western intelligence agencies have tracked closely since late 2024.

European governments are watching the situation carefully. German media described the reported buildup as “alarming.” Analysts note that a reinforcement of this scale would substantially reshape the manpower equation for Russian commanders, particularly at a moment when Ukraine is simultaneously fighting its own mobilization shortfalls and trying to hold a long front line with a smaller force.

If the deployment proceeds as described by Ukrainian and German sources, it would mark the largest single third-country military contribution to the Russia-Ukraine conflict since the war began in February 2022.

Also, remember this intelligence is coming from Western sources that have a political bias.

Keep reading

Report: Ukraine IDs North Korean Missile Unit Active in Russian Invasion

A senior Ukrainian intelligence official told Reuters in a report published on Wednesday that Russia had begun deploying a North Korean missile unit to its war theater against Ukraine, apparently exploiting potential vulnerabilities the invaded country has against ballistic missiles.

According to the report, the North Korean hardware is active in Russia’s Voronezh, which borders the occupied Ukrainian region of Luhansk, one of the two Donbas regions strongman Vladimir Putin “annexed” in the early months of the invasion. The official sharing the information, Andrii Cherniak of Ukraine’s Main Directorate of Intelligence, said the new missile unit “could be equipped with 120 ballistic missiles and six launchers for strikes against Ukraine.” He estimated that about 90 North Korean troops are in Voronezh and are expected to help operate the newly arrived missile units.

North Korea has been an active belligerent in the Russian invasion of Ukraine since at least late 2024, when Ukrainian intelligence officials first began observing North Korean troops fighting alongside the Russians. That year, Putin visited Pyongyang for the first time in two decades and signed a “mutual defense treaty” with communist dictator Kim Jong-un, which preceded the Kim regime becoming a much more vocal supporter of the Russian invasion on the world stage and ultimately publicly confirming its participation in the war. Kim has claimed, however, that North Korean troops in Russia were there only to clear landmines placed by Ukrainians, contrary to evidence that Pyongyang has played a larger offensive role in the conflict.

Reuters noted that it could not independently verify the Ukrainian intelligence official’s claims or receive any meaningful response from Pyongyang or Moscow. Ukrainian media has documented the use of North Korean missiles against its targets in the past week, however. Cherniak stated that North Korean ballistic missiles, in particular, had been active against Ukraine since at least August 2025. North Korean KN-23 ballistic missiles were allegedly used to bomb civilian residences in Ukraine last week.

Keep reading

Kim Yo Jong Threatens Japan With ‘Additional Military Options’ — Calls Tokyo A ‘War Criminal State’ As North Korea Targets Tomahawk Tests And US Alliance

Kim Yo Jong, the most powerful figure in North Korea after her brother Kim Jong Un, issued a direct military threat against Japan on Wednesday, warning that Pyongyang would develop “additional military options” in response to Tokyo’s expanding defense posture — and explicitly accusing Washington of enabling what she called the revival of a “war criminal state.”

The statement, published by the Korean Central News Agency, was both specific in its grievances and deliberately vague in its threatened response. Kim cited Japan’s recent test-firing of Tomahawk long-range cruise missiles — American-supplied weapons that give Japan’s Self-Defense Forces their first real offensive reach — as well as Japan’s May participation in U.S.-led military exercises in the Philippines. She accused Tokyo of moving to “formulate the possession of the capability for preemptive attack” and said those actions were entering “the stage of actual act.” In a direct shot at Washington, she condemned the United States for using Japan and South Korea as a “shock brigade” in the Asia-Pacific, encroaching on the security interests of neighboring states.

“Japan, a war criminal state, is accelerating its transformation into a war state, taking advantage of the acute and variable trend of the present international situation,” Kim stated per KCNA. “We will never remain a passive onlooker to the military evolution of Japan, which may pose a grave threat to the security of the Democratic People’s Republic of Korea.” She concluded with a formal declaration: “I make it clear upon authorization that the armed forces of the DPRK and the military leadership will set up additional military options, which are obviously due to Japan’s transformation.”

Japan’s defense posture has shifted dramatically over the past two years. Under Prime Minister Fumio Kishida’s legacy framework and continued by his successor, Japan has committed to doubling defense spending as a share of GDP — a structural break from the postwar pacifist constitution’s constraints that Tokyo spent eight decades trying to work around. Japan has deployed Type-12 surface-to-ship missiles and U.S.-supplied Tomahawk cruise missiles to its Southwestern Islands, the chain that runs between Kyushu and Taiwan, directly complicating any Chinese or North Korean calculus in the region. Tokyo’s defense minister stated as recently as Tuesday that Japan’s military needs to be expanded with a “sense of urgency and crisis,” per Channel News Asia, following a new government threat assessment that specifically named China, Russia, and North Korea as growing dangers requiring an immediate response.

The framing Kim Yo Jong deployed is worth unpacking, because Pyongyang’s propaganda rarely wastes specific language. By invoking Japan’s colonial-era record — a reference that carries enormous weight throughout East Asia — and then linking it to current military policy, she is positioning North Korea as the historical victim entitled to a security response. This narrative has more resonance in China and across Global South capitals than Western audiences typically appreciate. Beijing uses similar framing about Japanese militarism when it wants to create diplomatic space for opposing U.S.-Japan defense cooperation, and Pyongyang coordinates its messaging with Beijing more closely than most Western analysts acknowledge. The question is not whether Kim Yo Jong’s statement constitutes an existential threat on its own — it does not — but whether it signals an upcoming weapons test, a new missile deployment, or an acceleration of Pyongyang’s tactical nuclear force positioning toward Japan.

The timing is also notable in that Japan is watching Taiwan’s Han Kuang war games begin on the same day. Japan understands better than most Western nations that a Taiwan contingency is a Japan contingency — U.S. bases in Okinawa and on the main islands would be the immediate staging grounds for any American response to a Taiwan blockade or invasion. North Korea’s ability to threaten those bases with short-range missiles is real and has been since at least 2017. A Pyongyang that feels emboldened by China’s regional pressure campaign, or that calculates it can extract economic concessions by rattling sabers while Washington is distracted in the Middle East, has every structural incentive to escalate its rhetoric in exactly this direction.

Keep reading

Kim Jong Un Creates Ultimate Deadman Switch: North Korea To Auto-Launch Nukes If Assassinated

North Korea just casually revised its constitution to automatically launch a nuclear strike if leader Kim Jong Un is assassinated, or if the country’s nuclear command-and-control system is placed in danger by hostile forces’ attacks. 

The change was adopted during the first session of the 15th Supreme People’s Assembly in Pyongyang on March 22 and was disclosed this week by South Korea’s National Intelligence Service, which briefed senior officials on the details.

The updated Article 3 of North Korea’s nuclear policy law states: “If the command-and-control system over the state’s nuclear forces is placed in danger by hostile forces’ attacks … a nuclear strike shall be launched automatically and immediately.”

South Korean intelligence officials said the revision codifies procedures for retaliatory nuclear attacks in the event that Kim is killed or incapacitated during an attack, Reuters reports.

The policy update comes months after the assassination of Iran’s Supreme Leader Ayatollah Ali Khamenei and other senior Iranian officials in U.S.-backed Israeli strikes in February 2026. Analysts have described those operations as a “wake-up call” for Pyongyang, highlighting the effectiveness of leadership-targeted strikes.

Professor Andrei Lankov of Kookmin University in Seoul told The Telegraph that the constitutional emphasis gives added weight to what may have been existing policy: “This may have been policy before, but it has added emphasis now it has been enshrined in the constitution. Iran was the wake-up call.”

The nuclear policy revision was adopted alongside broader changes to North Korea’s constitution, also passed in March and revealed earlier this week. Those amendments remove all references to unification with South Korea, add an explicit territorial clause defining the country’s borders (including with the Republic of Korea to the south), and formally state that command authority over nuclear forces rests with Kim Jong Un as chairman of the State Affairs Commission.

Keep reading

Has Iran Learned the North Korea Lesson: Nukes Are Essential To Deter the US?

Arms control advocates contend that by attacking Iran in the name of preventing the emergence of a “rogue” nuclear state, the United States may have “taken a sledgehammer” to the entire nuclear nonproliferation regime.  Iran could be one of the first technologically capable powers to confirm that fear.  The clerical regime has indicated that the country may withdraw from the Nuclear Nonproliferation Treaty.  Such a move would eliminate any official monitoring of Tehran’s nuclear research and nuclear fuel enrichment.  North Korea took a similar step in 2003, and the move clearly facilitated the growth of Pyongyang’s embryonic nuclear-weapons program.

Foreign policy experts and members of the news media also note that Washington’s responses to the nuclear threat that North Korea, on the one hand, and Iran, on the other, allegedly pose to regional and world peace are diverging more sharply than ever before. The United States and its Israeli ally are now waging a major air war against Iran – supposedly to prevent that country from weaponizing its nuclear program.  Their stance toward North Korea is far more subdued.  Although U.S. leaders continue to officially demand that the Democratic People’s Republic of Korea (DPRK) commit to adopting a non-nuclear status and relinquish the weapons that it has already built, that demand is widely regarded throughout the international system as ineffectual posturing.  Even more significant, neither the United States nor an ally is taking any military action against the DPRK.

The contrast between Washington’s caution in dealing with a nuclear-armed North Korea and the flagrant U.S. coercion of Iran, which possesses no such weapons, could hardly be more striking. It has not gone unnoticed.  Pyongyang’s successful defiance of the United States regarding the nuclear issue could well produce an important lesson for Iran’s leaders.  Pyongyang has covertly built a small arsenal of approximately 50 nuclear warheads and an increasingly sophisticated fleet of ballistic missiles to deliver them.  U.S. and other leaders now treat North Korea with caution and restraint, however grudgingly.  Conversely, an Iran without nuclear weapons is being pounded severely.  Iranian leaders would be obtuse not to at least try to acquire (through construction or purchase) a modest deterrent similar to North Korea’s.

Until President Donald Trump’s first administration, Washington sought to prevent through diplomacy either Pyongyang or Tehran from pursuing a nuclear weapons program.  That approach apparently achieved some success with respect to Iran in 2015 when the clerical regime signed a multilateral agreement, the Joint Comprehensive Plan of Action (JCPOA), which placed restrictions on its nuclear program to ensure that it remained peaceful.  The document also contained provisions for frequent and intrusive UN inspections.  Trump, however, rescinded U.S. approval of that agreement in May 2018, dismissing it as “a bad deal.”  Thereafter, Israeli officials and their American supporters have repeatedly warned that Tehran was just months or perhaps even weeks away from building a nuclear arsenal.  There has never been compelling evidence supporting those allegations, but such warnings had become ever-present during the months leading up to the current war.

Keep reading

Two US citizens get combined 16 years in prison for running North Korean laptop farms — fake remote IT work scheme netted DPRK $5 million in around three years

Two individuals from New Jersey pleaded guilty to conspiracy to commit wire fraud and money laundering after their arrest in June 2025 for running laptop farms that allowed North Korean IT workers to pose as American residents and work at U.S. companies. According to the Department of Justice, the two individuals, Kejia Wang and Zhenxing Wang, were sentenced to 9 years and 7 years and 8 months of prison time, respectively, plus another three years of supervised release. Furthermore, they are required to forfeit a total of $600,000 that they were paid for during their service to North Korea, more formally known as the Democratic People’s Republic of Korea (DPRK).

“For years, the defendants enriched themselves by assisting North Korean actors in a fraudulent scheme to gain employment with U.S. companies,” Assistant Attorney General for National Security John A. Eisenberg said in the statement. “The ruse placed North Korean IT workers on the payrolls of unwitting U.S. companies and in U.S. computer systems, thereby harming our national security. NSD will hold accountable those who facilitate North Korea’s illicit revenue generation efforts.”

Records reveal that the two defendants, plus several other co-conspirators, stole the identities of over 80 U.S. persons and used them to illicitly gain positions in over 100 U.S. companies, including several that are listed in the Fortune 500. This resulted in massive expenses for the affected businesses, where they collectively had to spend over $3 million on legal fees, computer network remediation costs, and other damages.

Keep reading