惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Martin Fowler
Martin Fowler
A
About on SuperTechFans
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
aimingoo的专栏
aimingoo的专栏
T
The Blog of Author Tim Ferriss
IT之家
IT之家
罗磊的独立博客
博客园_首页
月光博客
月光博客
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Last Week in AI
Last Week in AI
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
量子位
Hugging Face - Blog
Hugging Face - Blog
G
Google Developers Blog
博客园 - 叶小钗
H
Help Net Security
N
Netflix TechBlog - Medium
B
Blog
Engineering at Meta
Engineering at Meta
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
V
V2EX
Vercel News
Vercel News
博客园 - 三生石上(FineUI控件)

Help Net Security

Police arrest 10 suspected members of Black Axe cybercrime gang ShinyHunters claims it stole 1.4 million records from Udemy Sevii unveils Cyber Swarm Defense Mode to stop AI-driven attacks at scale Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Cequence Agent Personas bring granular control and governance to enterprise AI agents NowSecure MARI gives enterprises evidence-based visibility into third-party mobile app risk The metrics killing your SOC, and what to use instead US state privacy fines reached $3.425 billion in 2025 Canada’s first SMS blaster case leads to three arrests Linux storage management tool Stratis 3.9.0 adds online encryption and cache-less pool startup TLS Connect gives SMBs a right-sized automated tool to manage TLS certificates Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks Your IAM was built for humans, AI agents don’t care The AI criminal mastermind is already hiring on gig platforms 25 open-source cybersecurity tools that don’t care about your budget Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach Users advised to drop passwords and make room for passkeys - Help Net Security Indirect prompt injection is taking hold in the wild - Help Net Security Compromised everyday devices power Chinese cyber espionage operations - Help Net Security New Cisco firewall malware can only be killed by pulling the plug - Help Net Security Meta is overhauling how you sign in, manage settings, and protect your accounts - Help Net Security Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers - Help Net Security OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards - Help Net Security AI is speeding up nation-state cyber programs - Help Net Security A study of 1,000 Android apps finds a privacy policy logging gap - Help Net Security IT spending to hit $6.31 trillion record, thanks to AI - Help Net Security Where AI in CI/CD is working for engineering teams - Help Net Security With AI's help, North Korean hackers stumbled into a near-undetectable attack - Help Net Security Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security
Helping North Korean IT remote workers is becoming a fast...
Sinisa Marko · 2026-05-08 · via Help Net Security

Two U.S. nationals were sentenced to 18 months in prison for operating “laptop farms” that helped North Korean IT workers gain employment at nearly 70 American companies, generating more than $1.2 million for Pyongyang’s government.

North Korean IT worker operation

Although Matthew Issac Knoot of Nashville, Tennessee, and Erick Ntekereze Prince of New York were sentenced in separate cases, both were convicted for the same type of crime involving North Korean remote IT worker schemes.

According to prosecutors, both men received company-issued laptops at their homes after American firms hired remote IT workers they believed were based in the United States. The defendants then installed remote desktop software that allowed overseas workers to connect to the devices while appearing to operate from U.S. locations.

“These were not paperwork violations. They were deliberate acts that exposed U.S. businesses, compromised trust, and supported one of the world’s most dangerous adversaries,” said U.S. Attorney Jason A. Reding Quiñones for the Southern District of Florida.

Prince, who pleaded guilty to wire fraud conspiracy in November, helped at least three North Korean IT workers secure remote jobs at U.S. companies between June 2020 and August 2024 through his company, Taggcar Inc. Victim companies paid more than $943,000 in salaries to workers tied to the scheme, with most of the money transferred overseas.

Knoot operated a laptop farm from his Nashville residences between July 2022 and August 2023, where prosecutors said he installed remote desktop software on company-issued laptops that allowed North Korean IT workers in China to appear as U.S.-based employees.

The scheme generated more than $250,000 from at least four American companies and caused more than $500,000 in auditing and remediation costs.

In addition to their prison sentences, Knoot was ordered to pay $15,100 in restitution and forfeit another $15,100, while Prince was ordered to forfeit $89,000.

The sentencings mark the seventh and eighth convictions of U.S.-based “laptop farmers” secured in the past five months as part of a broader crackdown on North Korean illicit revenue operations.

Last month, federal prosecutors secured prison sentences against two U.S. men accused of helping North Korean IT workers obtain remote jobs at more than 100 American companies, generating roughly $5 million for Pyongyang.

“These cases should leave no doubt that Americans who choose to facilitate these schemes will be identified and held accountable. Hosting laptops for DPRK IT workers is a federal crime which directly impacts our national security, and these sentences should serve as a warning to anyone considering it,” noted Assistant Director Brett Leatherman of the FBI’s Cyber Division.