Skip to content
  • Home
  • Cyber Map
  • About Us – Contact
  • Disclaimer
  • Terms and Rules
  • Privacy Policy
Cyber Web Spider Blog – News

Cyber Web Spider Blog – News

Globe Threat Map provides a real-time, interactive 3D visualization of global cyber threats. Monitor DDoS attacks, malware, and hacking attempts with geo-located arcs on a rotating globe. Stay informed with live logs and archive stats.

  • Home
  • Cyber Map
  • Cyber Security News
  • Security Week News
  • The Hacker News
  • How To?
  • Toggle search form
Ukrainian Jailed for Role in North Korean IT Fraud

Ukrainian Jailed for Role in North Korean IT Fraud

Posted on February 23, 2026 By CWS

A Ukrainian citizen has been sentenced to a five-year prison term in the United States for his involvement in aiding fraudulent activities conducted by North Korean IT professionals. The individual, identified as Oleksandr Didenko, was implicated in a scheme that included selling stolen identities and facilitating operations for IT workers from North Korea.

Fraudulent Activities Uncovered

Oleksandr Didenko, a 29-year-old from Kyiv, Ukraine, confessed to the charges in a US court in November 2025. His admission included aiding North Korean IT workers to secure employment at American companies through deceitful means. The court documents detailed how Didenko ran the domain Upworksell.com, which was instrumental in providing or renting stolen US identities to foreign IT workers.

These workers exploited these identities to gain employment on various freelance platforms based in California and Pennsylvania. The platforms allowed them to set up profiles, market their skills, and compete for IT contracts without being physically present in the United States.

Operation of Laptop Farms

Further investigations revealed that Didenko orchestrated the establishment of ‘laptop farms’ in multiple US states, including Virginia, Tennessee, and California. He allegedly managed 871 proxy identities and facilitated at least three such farms. These activities allowed foreign individuals to interact with the US financial system, transferring their earnings to international bank accounts without direct access to US banking facilities.

Court documents indicated that Didenko’s clients overseas earned substantial amounts, possibly reaching hundreds of thousands of dollars, from their engagements with over 40 different US companies.

Legal Proceedings and Sentencing

The domain Upworksell.com was seized on May 16, 2024, leading to Didenko’s arrest in Poland. He was later extradited to the United States on December 31, 2024. In November 2025, he pleaded guilty to charges of wire fraud conspiracy and aggravated identity theft. As part of his plea agreement, he agreed to surrender more than $1.4 million.

Didenko received a 60-month prison sentence, followed by a 12-month supervised release. Additionally, he was ordered to pay restitution exceeding $46,000. The case highlights significant vulnerabilities in online freelance platforms and the risks of identity theft in the digital age.

Related cases include a Romanian hacker pleading guilty to selling access to US State networks and other individuals admitting to assisting North Korean IT workers.

Security Week News Tags:cyber crime, Extradition, financial system, fraudulent activities, identity theft, IT workers, laptop farms, North Korean IT fraud, Ukrainian national, US court

Post navigation

Previous Post: Mitigating Risks of Exposed Endpoints in LLM Infrastructure
Next Post: Critical Vulnerability Found in Grandstream VoIP Phones

Related Posts

Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks Vulnerability in Dolby Decoder Can Allow Zero-Click Attacks Security Week News
HoundBytes Launches Automated Security Analyst HoundBytes Launches Automated Security Analyst Security Week News
Rethinking Success in Security: Why Climbing the Corporate Ladder Isn’t Always the Goal Rethinking Success in Security: Why Climbing the Corporate Ladder Isn’t Always the Goal Security Week News
Massive China-Linked Smishing Campaign Leveraged 194,000 Domains Massive China-Linked Smishing Campaign Leveraged 194,000 Domains Security Week News
Cryptojackers Caught Mining Monero via Exposed DevOps Infrastructure Cryptojackers Caught Mining Monero via Exposed DevOps Infrastructure Security Week News
In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware In Other News: Gladinet Flaw Exploitation, Attacks on ICS Honeypot, ClayRat Spyware Security Week News

Categories

  • Cyber Security News
  • How To?
  • Security Week News
  • The Hacker News

Recent Posts

  • Conduent’s Massive Data Breach: 8 TB Stolen by Ransomware
  • Anthropic Accuses Chinese AI Labs of Distillation Attacks
  • APT28’s Webhook Malware Targets Europe
  • GrayCharlie Targets WordPress Sites with Malicious Scripts
  • Starkiller Phishing Tool Bypasses MFA with Real Login Pages

Pages

  • About Us – Contact
  • Disclaimer
  • Privacy Policy
  • Terms and Rules

Archives

  • February 2026
  • January 2026
  • December 2025
  • November 2025
  • October 2025
  • September 2025
  • August 2025
  • July 2025
  • June 2025
  • May 2025

Recent Posts

  • Conduent’s Massive Data Breach: 8 TB Stolen by Ransomware
  • Anthropic Accuses Chinese AI Labs of Distillation Attacks
  • APT28’s Webhook Malware Targets Europe
  • GrayCharlie Targets WordPress Sites with Malicious Scripts
  • Starkiller Phishing Tool Bypasses MFA with Real Login Pages

Pages

  • About Us – Contact
  • Disclaimer
  • Privacy Policy
  • Terms and Rules

Categories

  • Cyber Security News
  • How To?
  • Security Week News
  • The Hacker News