Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The January 2025 case behind this headline named two U.S. nationals—not one—alongside two North Korean nationals and a Mexican national. Prosecutors alleged that the group helped North Korean IT workers use false identities and U.S.-based company laptops to obtain remote jobs and generate revenue for North Korea. These were indictment allegations, not findings of guilt. A later Justice Department update said one of the U.S. defendants had pleaded guilty; the other was awaiting trial at the time of that update.

What prosecutors alleged in the case

In an indictment announced on January 23, 2025, the Justice Department accused U.S. nationals Erick Ntekereze Prince and Emanuel Ashtor, North Korean nationals Jin Sung-Il and Pak Jin-Song, and Mexican national Pedro Ernesto Alonso De Los Reyes of participating in a scheme to help North Korean IT workers obtain remote employment. DOJ said the alleged activity ran from approximately April 2018 through August 2024.

According to DOJ’s summary of the indictment, the scheme obtained work from at least 64 U.S. companies. Payments from ten of those companies generated at least $866,255 in revenue, most of which prosecutors said was laundered through a Chinese bank account. Those figures describe the government’s allegations; they are not adjudicated findings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How the alleged remote-work scheme functioned

False or stolen identities

Prosecutors alleged that participants used forged and stolen identity documents, including U.S. passports containing another person’s stolen personally identifiable information. DOJ also described pseudonymous accounts on email, social media, payment platforms and job sites, as well as proxy computers and third parties, as methods used in DPRK IT-worker schemes.

#1 Best Overall
Sale
Liftmaster/Chamberlain/Sentex amz890mx 3 Button Key Chain Garage Door Opener Remote Transmitter
  • Multiple-Buttons: Control up to 3 garage door openers, gate operators, or MyQ-enabled lights
  • Safe Security: Security+ 2.0 rolling code technology virtually eliminates radio wave interference
  • Easily Fits: Mini keychain remote is small enough to fit in a purse, a pocket, or on a keychain
  • Security+: This system ensures that every click sends a secure code to your garage door opener
  • Battery-Operated: Mini remote control includes a 3v battery that provides up to 5 years of operation

Company laptops hosted in the United States

DOJ said U.S.-based facilitators received laptops supplied by employers at residences and installed remote-access software without authorization. The alleged setup allowed overseas workers to use those machines and appear to be working from the United States. The announcement reported that the FBI arrested Ntekereze and Ashtor and searched Ashtor’s North Carolina residence, where Ashtor had previously operated a laptop farm.

The indictment described alleged fraud and unauthorized computer activity connected to employment. It does not establish that every North Korean IT worker, or every person accused in this case, engaged in data theft or extortion.

Rank #2
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Charges and later case developments

The five defendants were charged with conspiracy to cause damage to a protected computer, conspiracy to commit wire and mail fraud, conspiracy to commit money laundering, and conspiracy to transfer false identification documents. Jin and Pak also faced a charge of conspiracy to violate the International Emergency Economic Powers Act (IEEPA).

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The Justice Department said the listed charges carried a maximum possible penalty of 20 years in prison. That is a statutory maximum, not a prediction of a sentence: any sentence would depend on a conviction, the applicable sentencing guidelines and other statutory factors.

Rank #3
2 for Chamberlain LiftMaster Craftsman Garage Door Opener Remote Keychain
  • Compatibility Infomation:Compatible with LiftMaster,Chamberlain,and Craftsman garage door openers manufactured from 1993 to the present day,this remote supports Two different frequencies of security rolling codes. Whether you're part of a multi-car family or need a replacement for lost or damaged remotes, our solution ensures hassle-free operation.
  • Small & Portable:A simple design with its small size and lightweight keychain, makes the remote perfect for attaching to your car key ring, pocket, or elsewhere, ensuring easy portability.
  • Easy to Set and Use:With its dual-color LED light design, the pairing process of the garage door becomes clearer and simpler. Say goodbye to complicated setups and enjoy a more pleasant and convenient user experience.
  • Safe & Reliable:The system employs the latest rolling code technology, minimizing radio wave interference while bolstering security. Each time the remote is used, a new security code is generated, providing a robust defense against potential intruders and ensuring the safety of your property.
  • Wide Signal Coverage:With a signal coverage range of up to 164 feet, it allows for remote control of door opening and closing. You can conveniently use the remote to unlock the door directly from your car as you approach home, enhancing your travel convenience.

In a November 2025 enforcement release, DOJ said Ntekereze Prince had pleaded guilty to wire fraud conspiracy in the Southern District of Florida. That release described him as having contracted IT workers through Taggcar Inc. and hosted company laptops. It said Ashtor was awaiting trial at that point. Those are the later procedural details established in the cited DOJ update; they do not establish a subsequent outcome for Ashtor or the other defendants.

What the case does—and does not—say about North Korean IT workers

DOJ says North Korea sends skilled IT workers abroad, primarily to China and Russia, to seek freelance and remote work under concealed identities and generate revenue for the regime. The government has also warned that some workers have used access gained through employment to take proprietary information or commit data extortion. Those broader warnings are distinct from the specific allegations in the Prince-Ashtor indictment.

Rank #4
Sale
2 for LiftMaster Chamberlain Craftsman Garage Door Opener Remote Keychain
  • 5 Colors Learn Button: Universal garage door opener remote compatible with Chamberlain Lift Master, and Craftsman garage door opener. Please make sure your garage door opener has a Red/Orange/Purple/Yellow/Green learn button manufactured from 1993 to the present, this remote supports security rolling codes. Ideal for multi-car families or as a replacement for lost or damaged remotes, it offers a hassle-free solution
  • Replacement Models: Garage Door Opener Remote replacement 371LM, 373LM, 891LM, 893LM, 950ESTD, 953ESTD, 970LM, 971LM, 972LM, 973LM, 81LM, 139.53753, 139.53985D, 139.53680, 139.53681, 940EV, 953EV, 956EV, 950CD, 950CB, 953CB, 956CB, 940CB, MC100-P2 and 850CB openers.
  • Security: Garage door opener remote system uses the latest Security+2.0 rolling code technology to minimize radio frequency interference while enhancing security. This technology can control multiple garage doors across 310, 315, and 390 MHz frequency bands. Each time the remote is used, a new security code is generated, providing you with robust security protection.
  • Compact and Lightweight: This universal garage door opener remote is small and lightweight. It can be easily attached to your keychain, stored in your pocket, or placed in your bag. It’s less likely to get lost and doesn’t need to be clipped in your car, preventing any marks or scratches.
  • Important Note: The garage door opener remote has two modes: SOLID and FLASHING. The FLASHING mode is suitable for garage door openers with Yellow/Green learning button types, while the SOLID mode is compatible with garage door openers that have Purple/Orange/Red learning button types. You can change the working mode of your garage door remote as needed. For instructions on how to change the mode, please refer to our manual or video.

A May 2022 advisory by the FBI, U.S. Department of State and U.S. Department of the Treasury estimated that a worker could generate up to $300,000 annually and that the broader activity brought in hundreds of millions of dollars collectively each year. That government estimate concerns the wider DPRK IT-worker scheme—not the proceeds attributed to this case.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

FBI Cyber Division Assistant Director Bryan Vorndran said: “FBI investigation has uncovered a years-long plot to install North Korean IT workers as remote employees to generate revenue for the DPRK regime and evade sanctions,” said Assistant Director Bryan Vorndran of the FBI’s Cyber Division.

Best Value
Thetis Nano-C FIDO2 Security Key Hardware Passkey Device with USB Type C, TOTP/HOTP, FIDO2.0 Two Factor Authentication 2FA MFA, Works with Windows/mac/iOS/Android/Linux/Gmail/Facebook/GitHub/Coinbase
  • Ultra-Compact FIDO2 Security Key – Plug-and-stay or carry on a keychain. This USB-C hardware security key offers portable, always-on protection for desktop and mobile use.(Item Size: 0.73 X 0.60 X 0.30 inches)
  • USB-C Hardware Key for All Devices – Works with USB-C ports on PC, Mac, Android, and USB-C iPhones. Enables secure, cross-platform login with FIDO2.0 passkey support.
  • FIDO Certified Security Key – Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
  • Passwordless Login with Passkey – Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
  • Advanced Multi-Factor Authentication – Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Do not conflate this case with other laptop-farm prosecutions

Other cases have involved alleged assistance to overseas IT workers, but they are separate prosecutions with different defendants and figures.

Proceeding What DOJ announced How it differs
Prince-Ashtor case, January 2025 Five defendants; alleged work involving at least 64 U.S. companies and at least $866,255 in payments from ten companies. The case discussed above. DOJ later reported Ntekereze Prince’s guilty plea and said Ashtor was awaiting trial as of its November 2025 update.
Christina Marie Chapman case, May 2024 An Arizona U.S. citizen was accused of running a laptop farm connected to overseas IT workers and a scheme affecting more than 300 U.S. companies. A separate indictment, not another defendant in the January 2025 case.
Massachusetts case, June 2025 A separate indictment alleged that more than 80 U.S. identities were compromised, more than 100 U.S. companies were affected, overseas IT workers received at least $5 million in revenue, and victim companies lost at least $3 million. These allegations and amounts do not belong to the Prince-Ashtor case.

Why the headline’s wording needs care

Calling the defendants “hackers” can blur the distinction between the alleged job-fraud scheme and the government’s broader warnings about possible data theft or extortion by some workers. The January 2025 announcement focused on alleged identity fraud, remote employment, money laundering and protected-computer offenses. It named two U.S. nationals accused of helping—not a single U.S. citizen—and the allegations should not be treated as convictions.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.