United

<p>If Pyongyang is not yet firing missiles at the United States, believe it, the attack is already underway. But on other fronts. Kim Jong-un’s army advances silently, dressed as developers. Objective: annihilate the enemy from within, keyboard after keyboard. Welcome to the era of North Korean hacking, where lines of code replace front lines.</p>
<div class="in-brief">
 <div class="in-brief--container">
  <span></span> <span></span>
  <h2 class="in-brief--title" id="in-brief">In brief</h2>
  <ul>
   <li>Minh Vong arrested and sentenced after helping North Korean hackers infiltrate American tech.</li>
   <li>He earned $970,000 posing as a developer for American companies.</li>
   <li>Hackers accessed sensitive systems through credentials provided by Vong.</li>
   <li>The investigation reveals an operation financed by Pyongyang via laptop farms and fake identities.</li>
  </ul>
 </div>
</div>
<h2 id="h-the-fake-developer-who-trapped-american-tech">The fake developer who trapped American tech</h2>
<p>Is this a new move by the <a href="https://www.cointribune.com/en/bybit-loses-400000-eth-in-massive-crypto-hack/" rel="noopener noreferrer nofollow">Lazarus Group</a>? The mystery remains, but the case already chills the blood. Minh Phuong Ngoc Vong, a 40-year-old American citizen, was recently <a href="https://decrypt.co/351103/maryland-man-sentenced-for-helping-north-korea-infiltrate-u-s-tech-firms" rel="noopener noreferrer nofollow">sentenced to 15 months in prison</a>. His crime? Lending his identity to North Korean hackers to infiltrate at least 13 American companies, several contracted with government agencies.</p>
<div class="my-4">
 <div class="ads ">
 </div>
</div>
<div class="tweet">
 <blockquote class="twitter-tweet">
  <a href="https://twitter.com/DOJNatSec/status/1996717596305936612?s=20?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow"></a>
 </blockquote>
</div>
<p>Between 2021 and 2024, Vong impersonated a developer with a fake resume: bogus degree, false experience, and even a claimed secret clearance level. All to allow North Korean agents, including one “William James” based in Shenyang, to work remotely under his cover. Companies, believing they were hiring an American, unknowingly funded hacking operations originating from Asia.</p>
<p>Worse: Vong even secured a contract with the FAA, the Federal Aviation Administration, accessing defense-related systems. One click was enough to open a door to sensitive data.</p>
<p>As Roman Rozhavsky from the FBI Counterintelligence Division sums up:</p>
<blockquote class="wp-block-quote">
 <p><em>North Korea remains determined to fund its weapons programs by scamming American companies and exploiting American victims of identity theft, but the FBI is equally determined to disrupt this vast campaign and bring its perpetrators to justice.&nbsp;</em></p>
</blockquote>
<h2 id="h-invisible-hackers-very-real-salaries">Invisible hackers, very real salaries</h2>
<p>North Korean hackers do not just infiltrate. They get paid. Minh Vong received over $970,000 in salaries, passing a large portion to his accomplices. Officially, he was a developer for thirteen companies. Unofficially, he was the face of a network of digital agents.</p>
<div class="tweet">
 <blockquote class="twitter-tweet">
  <a href="https://twitter.com/TheHackersNews/status/1995888781233455408?s=20?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow"></a>
 </blockquote>
</div>
<p>“Laptop farms” have become a strategic tool: American homes hosting computers provided by companies, remotely controlled by North Koreans. The scheme is simple: an American lends his papers, access, connection. In return, he gets a commission, while the real work is done in Pyongyang or Shenyang.</p>
<p>An investigation revealed that one of the developers who recommended Vong during a virtual interview discovered much later that the person he met was not the same as the one in the ID photos.</p>
<p>As the <a href="https://www.justice.gov/opa/pr/maryland-man-sentenced-conspiracy-commit-wire-fraud" rel="noopener noreferrer nofollow">DOJ points out</a> in a statement:</p>
<blockquote class="wp-block-quote">
 <p><em>Doe’s communications show he is likely a North Korean national working to generate revenue for the North Korean government. Accordingly, the court finds the conspirators gained unauthorized access to sensitive government systems.</em></p>
</blockquote>
<p>Meanwhile, Pyongyang discreetly pockets millions of dollars.</p>
<div class="my-4">
 <div class="ads ">
 </div>
</div>
<h2 id="h-cryptos-ai-digital-sabotage-tech-under-pressure">Cryptos, AI, digital sabotage: tech under pressure</h2>
<p>North Korean hackers don’t stop at sensitive data. They also attack cryptocurrencies. In 2025, more than $2 billion in digital assets were reportedly stolen. Platforms like Upbit and <a href="https://www.cointribune.com/en/north-koreas-lazarus-group-linked-to-bybit-and-phemex-hacks/" rel="noopener noreferrer nofollow">Bybit</a> were targeted, using increasingly sophisticated methods.</p>
<div class="affiliate-button">
 <a href="https://www.financeads.net/tc.php?t=72846C386875220T" rel="noopener noreferrer nofollow">Start your crypto adventure safely with Coinhouse</a> <a href="https://www.cointribune.com/en/sponsored-content/" rel="noopener noreferrer nofollow">This link uses an affiliate program.</a>
</div>
<p>The regime now relies on <a href="https://www.cointribune.com/en/tag/artificial-intelligence-en/" rel="noopener noreferrer nofollow">artificial intelligence</a>. Since the 1990s, North Korea has invested in research on voice recognition, data processing, and optimization. Today, reports mention illegal use of Nvidia GPUs to accelerate hacking.</p>
<p>North Korean cybercriminals exploit every technological loophole, also targeting crypto startups. They apply, gain access, and then siphon digital wallets remotely. Global tech becomes their battlefield.</p>
<h3 id="h-some-chilling-numbers">Some chilling numbers:</h3>
<ul>
 <li>More than 13 American tech companies infiltrated by Minh Vong between 2021 and 2024;</li>
 <li>Nearly $970,000 paid for work done by North Korean hackers;</li>
 <li>One individual (Vong) enabled access to defense-related systems;</li>
 <li>In 2025, $2 billion in crypto stolen by North Korea;</li>
 <li>The regime funds its missiles through these covert cyber operations.</li>
</ul>
<p>The North Korean threat is no longer virtual; it is very real. Infiltrations in tech and attacks on crypto continue to grow. Facing this shadow war, states are tightening ranks. Worldwide, <a href="https://www.cointribune.com/en/crypto-the-fight-against-north-korean-hackers-intensifies-worldwide/" rel="noopener noreferrer nofollow">efforts multiply</a> to detect, neutralize, and prosecute North Korean hackers. The keyboard has become a weapon, and the battlefield, global.</p>

An American sentenced for helping North Korea infiltrate US tech

Table of Contents

Cointribune EN

Other articles published on Dec 6, 2025

ETH Breaks Out of Its Daily Wedge Structure and Builds Momentum Toward $5,000

Bitcoin Price Weakens, Raising Concerns of Return to $80K Zone if Support Fails

Do Kwon Facing 12-Year Prison Request in Terraform Labs Case

NFT sales show modest $77M, Ethereum NFT sales drop 13%

Pi Network Introduces New AI Upgrade to Accelerate KYC and Mainnet Migration

Binance's CZ and MicroStrategy's Saylor Meet in Dubai

Join our free newsletter for daily crypto updates!