U.S. sentencing of Oleksandr Didenko in North Korea IT worker fraud case
Law Enforcement
Summary
Hide ▲
Show ▼
A U.S. court sentenced Oleksandr Didenko to five years in prison for helping run North Korea's fraudulent IT worker scheme that used stolen identities to infiltrate U.S. companies. The case adds a completed criminal penalty to a cross-border fraud operation that placed fake remote workers at 40 U.S. companies and routed salaries back to North Korea. Investigators said Didenko also used Upworksell[.]com, proxy identities, and U.S.-based laptop farms to conceal where the workers were actually located. The outcome increases enforcement pressure on the identity-theft and salary-funneling infrastructure behind the scheme.
Related Happenings
OFAC sanctions DPRK IT worker scheme network
Regulatory/Legal Action
First: 18.03.2026 19:26
Last: 18.03.2026 19:26
Sources 1
About this happening:
**OFAC** sanctioned **Ryujong Credit Bank**, **KMCTC**, and **eight individuals** tied to **North Korean cryptocurrency laundering** and **fraudulent IT worker schemes**. The **U....
OFAC sanctions DPRK IT worker scheme network
Regulatory/Legal ActionAbout this happening: **OFAC** sanctioned **Ryujong Credit Bank**, **KMCTC**, and **eight individuals** tied to **North Korean cryptocurrency laundering** and **fraudulent IT worker schemes**. The **U....
Derrick Van Yeboah guilty plea in wire fraud case
Law Enforcement
First: 06.03.2026 12:08
Last: 06.03.2026 12:08
Sources 1
About this happening:
A U.S. federal court accepted **Derrick Van Yeboah**'s guilty plea to **conspiracy to commit wire fraud**, advancing a **cyber-fraud** case tied to **more than $100 million** stol...
Derrick Van Yeboah guilty plea in wire fraud case
Law EnforcementAbout this happening: A U.S. federal court accepted **Derrick Van Yeboah**'s guilty plea to **conspiracy to commit wire fraud**, advancing a **cyber-fraud** case tied to **more than $100 million** stol...
North Korean stolen-identity IT job campaign against U.S. companies
Campaign
First: 20.02.2026 11:00
Last: 20.02.2026 11:00
Sources 1
How related:
The defendant is said to have run a website named Upworksell[.]com to help overseas IT workers buy or rent stolen or borrowed identities since the start of 2021.
About this happening:
A **North Korea-linked** IT-worker campaign used **stolen identities** and **proxy accounts** to fraudulently place remote workers at **40 U.S. companies**, creating unauthorized...
North Korean stolen-identity IT job campaign against U.S. companies
CampaignHow related: The defendant is said to have run a website named Upworksell[.]com to help overseas IT workers buy or rent stolen or borrowed identities since the start of 2021.
About this happening: A **North Korea-linked** IT-worker campaign used **stolen identities** and **proxy accounts** to fraudulently place remote workers at **40 U.S. companies**, creating unauthorized...
Matthew Abiodun Akande sentencing in tax-firm hacking case
Law Enforcement
First: 19.02.2026 15:51
Last: 19.02.2026 15:51
Sources 1
About this happening:
**Matthew Abiodun Akande** was **sentenced to eight years in prison** for a **tax-firm hacking** and **refund fraud** case that targeted firms in **Massachusetts**. Prosecutors sa...
Matthew Abiodun Akande sentencing in tax-firm hacking case
Law EnforcementAbout this happening: **Matthew Abiodun Akande** was **sentenced to eight years in prison** for a **tax-firm hacking** and **refund fraud** case that targeted firms in **Massachusetts**. Prosecutors sa...
North Korean remote IT worker infiltration trend across companies
Target Trend
First: 20.08.2025 12:18
Last: 20.08.2025 12:18
Sources 1
About this happening:
**North Korean remote IT worker** infiltration continues to expand as **Famous Chollima (WageMole)** uses **stolen identities**, **deep fake videos**, GitHub spam, and remote-acce...
North Korean remote IT worker infiltration trend across companies
Target TrendAbout this happening: **North Korean remote IT worker** infiltration continues to expand as **Famous Chollima (WageMole)** uses **stolen identities**, **deep fake videos**, GitHub spam, and remote-acce...
Timeline
-
20.02.2026 11:52 1 articles · 3mo ago
Authorities seize Upworksell[.]com identity-broker site
Legal Policy Action UpdateAuthorities seized Upworksell[.]com on May 16, 2024 after the site had been used since the start of 2021 to help overseas IT workers buy or rent stolen or borrowed identities for fraudulent remote jobs on freelance work platforms based in California and Pennsylvania.
Show sources
- Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case — thehackernews.com — 20.02.2026 11:52
-
20.02.2026 11:52 2 articles · 3mo ago
U.S. sentences Oleksandr Didenko for North Korea IT worker scheme
Legal Policy Action UpdateA U.S. court sentenced Oleksandr "Alexander" Didenko, a 29-year-old Ukrainian national, to five years in prison, 12 months of supervised release, and $46,547.28 in restitution for helping run North Korea's fraudulent information technology (IT) worker scheme. The scheme used stolen identities, Upworksell[.]com, proxy identities, U.S.-based laptop farms, and Money Service Transmitters to place remote workers at 40 U.S. companies and move employment income back to North Korea.
Show sources
- Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case — thehackernews.com — 20.02.2026 11:52
- Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case — thehackernews.com — 20.02.2026 11:52
-
20.02.2026 11:52 1 articles · 3mo ago
Public disclosure of Didenko plea, forfeiture, and LinkedIn impersonation
Initial DisclosureOleksandr "Alexander" Didenko's November 2025 guilty plea to wire fraud conspiracy and aggravated identity theft, more than $1.4 million in forfeiture, and Security Alliance (SEAL)'s finding that the IT workers began using real LinkedIn accounts to make fraudulent remote-job applications look authentic were publicly detailed alongside the sentencing case.
Show sources
- Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case — thehackernews.com — 20.02.2026 11:52