A federal judge sentenced Kejia "Tony" Wang to **nine years in prison** for leading a scheme that placed North Korean IT workers in remote tech jobs at over 100 U.S. companies, including Fortune 500 firms. The network stole identities of more than 80 Americans, forged documents, and generated over **$5 million in salary payments**. Another participant, Zhenxing Wang, received nearly eight years. Both were ordered to forfeit $600,000.

This case is part of a broader crackdown: at least seven Americans have been convicted since last year for aiding North Korea's government. The scheme, which the UN says has generated **$2.8 billion in two years**, funnels money to Kim Jong Un's nuclear weapons program. According to Assistant Attorney General John Eisenberg, "North Korean IT worker schemes would not be successful without U.S.-based facilitators."

### How the Scheme Works

The operation relies on two types of American identities: stolen ones from background-check databases, and willingly rented ones. Facilitators may show up for interviews, accept laptops, provide urine samples for drug tests, or sit in offices pretending to work. They take a cut of the salary. Investigators say the line between victim and conspirator is often blurry.

### AI-Powered Deception
Artificial intelligence has boosted the scheme. Palo Alto Networks described how AI converts North Korean accents into convincing American-sounding voices during live job interviews. The regime has built an "industrial hiring machine" with specialists for crafting resumes, sitting for interviews, and doing the actual work.

### The Sting Operation
Cybersecurity firm DTEX set up a front company to lure DPRK workers. A candidate claiming to be from Austin, Texas, showed no familiarity with Texan culture. When asked to come on-site, a young man named "David" appeared with a real ID—a local proxy. The laptop was then shipped to another facilitator, "Aaron," in Minnesota. Both denied involvement when contacted by Fortune, but their identities remain active in the scheme.

### Identities That Never Die
Even after facilitators walk away, their identities keep circulating. DTEX investigator Michael Barnhart tracked identities that were still being used years later. Fake LinkedIn profiles and resumes with their names continue to land on recruiters' desks. The real people behind them "might not even know they're still part of the scam."

### Victim or Conspirator?
The grooming process can be extensive. DPRK workers build relationships over months, sometimes helping facilitators with homework. Some workers, when about to be caught, announce medical leave to get extra paychecks. The remote jobs stolen are exactly the kind that Americans with disabilities or caregiving responsibilities depend on.

**Key takeaway:** This is a sophisticated, ongoing threat that exploits remote work and U.S. hiring practices. Companies must strengthen identity verification and be vigilant against AI-powered deception.

“North Korean IT worker schemes would not be successful without U.S.-based facilitators,” wrote Assistant Attorney General John Eisenberg in an April sentencing memo.


How North Korean Hackers Are Stealing Remote IT Jobs and Americans Are Helping

LinkedIn job scams have evolved into a **borderless epidemic**, preying on the hopes of desperate job seekers worldwide and costing victims anywhere from a few hundred dollars to $25,000.

While Microsoft-owned LinkedIn connects millions to opportunities, it has also become a **shared hunting ground for fraudsters**. From Nairobi and Lagos to Mumbai and Mexico City, scammers are masterfully tailoring their tactics to specific **cultural expectations, industry trends, and economic pressures** in each region.

> **80.6 million**
> LinkedIn identified and removed 80.6 million fake accounts at the time of registration during July–December 2024.

### How Scammers Adapt Locally

- **In India**, tech jobs are used as bait because the industry employs millions and offers high-paying roles. Scammers pose as mentors from companies like Facebook, Apple, Amazon, Netflix, and Google, offering free resume reviews and referrals before charging for advanced services.
- **In Kenya**, the unorganized recruitment industry allows scammers to leverage fake personal referrals. They often ask for "facilitation fees" to process documents, mirroring corrupt practices that exist in legitimate hiring.
- **In Mexico**, scammers capitalize on the **informal job economy** by advertising fake formal roles that promise security. They often request payment for travel to interviews abroad before disappearing.
- **In Nigeria**, scammers exploit **acute unemployment** by offering cryptocurrency earnings in exchange for LinkedIn login credentials, hijacking accounts to distribute fake job referrals.

### LinkedIn's Response

In its transparency report for July–December 2024, LinkedIn reported removing **80.6 million fake accounts** at registration, up from 70.1 million in the prior six months. A LinkedIn spokesperson stated:

> "While online fraud continues to become more sophisticated, over 99% of the fake accounts we remove are detected proactively before anyone reports them. We’re constantly investing in new technology and human expertise to strengthen our ability to detect and stop harmful behavior."

LinkedIn has introduced features like **verification badges on job postings** and recruiter profiles, along with filters for verified jobs and safety tools such as message warnings and scam detection.

### The Human Cost

Human resources experts warn that the trend of people falling for these scams is likely to grow due to **global layoffs and economic desperation**. Victims often ignore red flags because the possibility of change outweighs the fear of being scammed.

In the U.S., job scam texts were the second most common type of hoax reported in 2024, after fake package deliveries, according to the Federal Trade Commission.

### Case Studies

- **Michael Oruko in Kenya** nearly fell for a scam promising a position at a dairy processor. The scammer used a fake title and asked for money to "fast-track" paperwork.
- **Busola in Nigeria** lost her LinkedIn account after sharing login credentials with a scammer offering cryptocurrency earnings. Her account was used to distribute fake job referrals to her network.
- **Rosy Ortiz in Mexico** noted that scammers often pose as international companies, requesting payment for travel to interviews before disappearing.

### Why These Scams Work

Scammers exploit **local economic pressures and cultural norms**. In India, the social pressure to secure a tech job makes IT graduates vulnerable. In Nigeria, high unemployment drives professionals to take risks. In Kenya, corruption in recruitment blurs the lines between legitimate and fake opportunities.

Emmanuel Faith, founder of HR Clinic in Lagos, explained:

> "They want to believe it’s real. That’s what scammers count on. LinkedIn profiles contain valuable detailed data, making it easy to personalize attacks."

As job seekers navigate an increasingly digital landscape, vigilance and due diligence are essential to avoid falling victim to these **sophisticated and localized scams**.

Scammers are adapting their playbook to each country, exploiting local job markets from Nairobi to Mumbai and Mexico City.

LinkedIn Job Scams Go Global: How Scammers Are Exploiting Local Desperation from India to Nigeria

![Representational image of a hacker](https://cdn.mos.cms.futurecdn.net/h3qR8UKMq6wXR6WHZfxfUe.jpg)

*(Image credit: Shutterstock)*

## The Dark Web's Growing Appeal

As the global job market deteriorates due to **massive layoffs**, difficult recruitment screenings, and **AI programs eliminating workforce positions**, new research reveals that graduates and young people are increasingly turning to the **dark web for employment opportunities**.

### Key Findings from Kaspersky Research

- **Young tech workers** are actively seeking jobs on the dark web
- The **median age of applicants** is just 24 years old
- Dark web workers can earn **over $5,000 per month**

### Competitive Dark Web Job Market

Contrary to popular belief, the dark web job market isn't easy to penetrate. **Kaspersky research reveals** that applicants significantly outnumber job listings (55-45 ratio), with 69% of candidates being open to any field. This creates **fierce competition** for available positions.

### A Worrying Trend

The young median age of job seekers suggests that **skilled graduates** are unable to find legitimate employment and are instead being forced to use their technical skills against the cybersecurity industry they might have otherwise joined.

## Lucrative Opportunities in the Shadows

Kaspersky's report found that those who transition to the dark web can be well rewarded:

- **Reverse engineers** earn an average of $5,000 per month
- **Penetration testers** bring in approximately $4,000 monthly
- **Developers** can make around $2,000 per month

### Expert Commentary

"The shadow job market is no longer peripheral; it's absorbing the unemployed, the underage, and the overqualified," comments Alexandra Fedosimova, Digital Footprint Analyst at Kaspersky.

"Many arrive thinking that the dark web and the legal market are fundamentally alike, rewarding proven skills over diplomas, with the dark web even offering some benefits – like offers landing within 48 hours and no HR interviews. However, not many realize that **working on the dark web can lead to prison.**"

## Broader Industry Context

The **tech industry is stalling as AI eliminates positions**, with junior roles being cut in half in recent years. Given the challenging state of the legitimate job market, it's unsurprising that some highly skilled workers are turning to less legitimate means to survive.

### Long-Term Implications

Organizations are saving money in the short term by **eliminating junior roles and replacing them with AI**. However, if the dark web continues to nurture these technical talents, the cybersecurity landscape could face significant challenges in the future. When senior developers retire, the deck may be stacked against legitimate defenders who face adversaries trained and employed through underground channels.

Global layoffs and rising cost of living drives young people to the dark web

Why Young Tech Talent Is Fleeing to the Dark Web for Lucrative Jobs

## AI Reshapes Cybersecurity Job Market

**Cybersecurity hiring has slowed** over the past six months as businesses reassess budgets amid a slowing U.S. economy, while the federal government has also reduced agency funding and positions. Despite this, the **CyberSeek job board** currently lists more than **514,000 open cyber positions**.

A significant milestone has been reached: **10% of all available security positions** now explicitly require candidates to have some type of **artificial intelligence (AI) skill**. According to CyberSeek, a joint initiative of NICE, Lightcast, and CompTIA, "Over the past 12 months, approximately 10% of employers recruiting for cybersecurity positions cited AI as a requirement. For other segments of employers, it may be an implied skill requirement not explicitly mentioned in the job listing."

While generative AI, agentic AI, and other technologies are viewed as ways to automate many manual security processes, the CyberSeek numbers, along with other research data, show that **AI is driving cybersecurity professionals to quickly develop new skill sets** to meet the evolving demands of these jobs.

## AI Creates New Opportunities, Not Just Job Losses

There is concern that AI could eliminate entry- and junior-level positions, but research firm Gartner found that organizations wanting to deploy AI for security, especially in areas like their **security operations center (SOC)**, still need skilled cyber professionals. These employees must be trained in AI and related areas to understand how virtual chatbots and other platforms work.

"Use of AI in security operations roles, like any other technology, will require new skills and training," according to Gartner. "Senior analyst roles and staff with programming/code-first skill sets are more likely to offer value to the SOC organization when considering how to use automation and AI on a day-to-day basis."

### A Shifting Job Landscape Focuses on AI Skills

Cybersecurity experts note that while AI is changing the market and the skill sets needed, it's not yet clear how the technology will ultimately affect the job market and hiring. The threat of AI taking jobs has not materialized; instead, the technology is creating new positions that are only now emerging.

Diana Kelley, CISO at Noma Security, stated, "As the CyberSeek numbers point out, while some jobs will be replaced, others will evolve, and new jobs will be created such as AI researcher. I’ve also seen a number of postings for AI security prompt engineers that weren’t open headcount 12 months ago. This isn’t about AI replacing security experts, but about augmenting them."

The integration of AI into core business operations has significant implications for the workforce, including security practitioners, legal, compliance, and risk teams, which will now require upskilling in areas like AI technologies and data governance.

With research showing that **64% of organizations** are planning to add AI-powered platforms to their security stack in the next year, professionals must start to cross-skill in these technologies, said Nicole Carignan, senior vice president for security and AI strategy at Darktrace.

"As AI becomes further embedded across the cyber landscape, it’s reshaping the structure, skillsets and strategies of all areas of the business, in particular the SOC," Carignan explained. "The tools used by attackers and defenders are evolving rapidly, and AI offers critical support in helping teams keep pace. When implemented responsibly, AI can augment the existing cyber workforce – expanding situational awareness, accelerating mean time to action, and enabling SOC teams to be more efficient, reduce fatigue, and better prioritize cyber investigation workloads."

Bugcrowd CEO Dave Gerry noted that while AI might seem like a worthy security investment for organizations with limited budgets, deploying these platforms and virtual chatbots still requires human oversight and supervision, necessitating investment in training.

"AI has the potential to level the playing field for these under-resourced operations, but only if it's deployed safely, securely, and with the right human oversight," Gerry said. "Without the combination of clear guardrails and experienced staff to monitor the outcomes, there is a risk of automation of failure at scale."

## SOCs Need Skilled AI Workers

Cybersecurity workforce studies show that organizations have shifted away from hiring lots of workers and are now focused more on skills, especially regarding AI. While some see AI taking roles from younger workers, others remain skeptical since modern SOCs rely on technology that must be carefully managed, even with automated processes.

Diana Kelley pointed out that SOC analysts are now more likely to use **AI-assisted hunting tools** for analysis, which are faster and more accurate than manual log reviews. "AI security literacy and the ability to use AI to help improve security outcomes will be a core capability for cyber professionals moving forward," she added.

"As organizations adopt agentic AI systems – software agents that leverage large language models for 'reasoning' and then act through connected tools – the security stakes will rise," Kelley said. "Knowing how to secure their use will be one of the most valuable skill sets in the next decade. A security professional fluent in traditional cyber defense and AI threat modeling will be positioned not just to keep today’s SOC effective, but to safeguard the autonomous platforms of tomorrow."

When AI technologies are added to a SOC, they act as a **force multiplier**, automating tasks like triage and performing autonomous investigations, allowing security teams to pivot from reactive alert-handling to strategic initiatives like threat hunting, cyber resilience planning, and risk mitigation, according to Carignan.

"Realizing this benefit requires a workforce that understands how to effectively use, operationalize, govern, and most importantly, trust these technologies. It’s not enough to simply deploy an AI solution – security practitioners must understand how the underlying machine learning techniques function, what their strengths and limitations are, and how to evaluate their outputs," Carignan emphasized. "Without explainability and trust, AI risks exacerbating alert fatigue rather than solving it."

As more AI technologies enter SOCs and cybersecurity defenses, Carignan sees a future where security remains a human-centric occupation, provided employees have the necessary skills.

"GenAI has many helpful use cases in the SOC. However, if models are not rooted in transparency, explainability, privacy and control, hallucinations or inaccurate outputs may cause erroneous information to be fed into workflows, exacerbating issues of alert fatigue and burnout," Carignan added. "Ultimately, the future of the SOC, and the cybersecurity industry as a whole, will be built on human-AI collaboration. Organizations that succeed will invest in continuous education, embrace transparency and explainability in AI design, and empower their security teams with the knowledge to lead with – not just adopt – AI-powered defenses."

AI is reshaping the cybersecurity job market, pushing demand for new skills even as overall tech hiring slows. From SOC analysts to compliance teams, professionals must adapt quickly as organizations adopt AI-powered tools.

AI Skills Are Now Essential for Cybersecurity Jobs: Here's Why You Need Them

An Arizona woman, Christina Marie Chapman, 50, has been sentenced to over eight years in prison for her role in a sophisticated scheme that helped North Korean tech workers secure remote jobs with hundreds of U.S. firms using stolen identities. This operation not only defrauded American companies but also funneled over **$17 million** to Pyongyang, according to the Justice Department.

### The Scheme's Mechanics
Chapman facilitated the placement of North Korean workers in **309 U.S. businesses**, including a top-five major television network and a Silicon Valley tech giant. The scheme involved the use of stolen or borrowed identities of U.S. citizens, creating false tax liabilities for **68 Americans**.

### The Aftermath and Warnings
Interim U.S. Attorney Jeanine Ferris Pirro highlighted the broader implications, stating, **"North Korea is not just a threat to the homeland from afar. It is an enemy within."** She urged companies to enhance their vetting processes for remote workers to prevent similar security breaches.

### Legal Consequences
Chapman pleaded guilty to charges including conspiracy to commit wire fraud and aggravated identity theft. Alongside her **102-month prison sentence**, she was ordered to forfeit nearly **$285,000** and pay a judgment exceeding **$175,000**.

"The impacted companies included a top-five major television network, a Silicon Valley technology company, an aerospace manufacturer, an American car maker, a luxury retail store, and a U.S media and entertainment company," the DOJ said.

Inside the Shocking North Korean Tech Worker Fraud Scheme That Fooled Hundreds of U.S. Companies

**North Korean tech workers** have been implicated in a **large-scale identity theft and fraud scheme**, illegally securing remote jobs at over **100 US companies**, including several **Fortune 500 firms**. This operation, part of a broader effort by the **Kim Jong-un regime** to generate illicit revenue, involved stealing sensitive information, such as **US military technology**.

### The Scheme Uncovered
- **Stolen Identities**: Over **80 US citizens' identities** were compromised to obtain these jobs.
- **Financial Impact**: The scheme caused at least **$3 million in damages** to companies, covering legal fees and network remediation costs.
- **Sensitive Data Access**: Workers accessed or stole **export-controlled military technology** and sensitive employer data.

### Global Collaboration
- **International Enablers**: The operation received support from individuals in the **US, China, UAE, and Taiwan**.
- **Laptop Farms**: Investigators uncovered **29 locations across 16 US states** used to simulate remote workers' presence.

### Legal Actions
- **Indictments**: Two indictments were disclosed, highlighting a **multi-year fraud scheme** generating over **$5 million**.
- **Arrests and Seizures**: A US national was arrested, and **29 financial accounts** were seized, used to launder money for the North Korean regime.

### Cybersecurity Threats
- **Immediate Threat**: US officials warn of the **real and immediate danger** posed by North Korean operatives blending into the global digital workforce.
- **Targeted Industries**: Companies across **multiple industries** in the US were affected, with sensitive data compromised.

![A photo extracted by The Korea Herald from a US federal indictment](https://wimg.heraldcorp.com/news/cms/2025/07/01/news-p.v1.20250701.5d3671be6dea472ab89f305f88d41d70_P1.png)
*A team of North Korean IT workers operating behind the scenes during the investigation.*

North Korean tech workers stole the identities of more than 80 US citizens to illegally obtain remote jobs at over 100 American companies — including many Fortu

North Korean IT Workers Infiltrate US Firms: A Cyber Espionage Scandal

## **North Korean Workers Infiltrating U.S. Tech Jobs**

Recent reports have revealed that **North Korean workers** are increasingly infiltrating **tech companies** across the **Tampa Bay area** and other parts of the **United States**. This alarming trend raises significant **security and ethical concerns** for the tech industry.

![North Korean workers infiltrating tech jobs](https://c107833-mcdn.mp.lura.live/expiretime=2082787200/a69852f3d22dd2873f9cec0d38d2d5e35f3357dfdecb61f8775d6c43448f3579/iupl/578/E40/578E407BEB58376950A31984FF0B9A0D.jpg)

The infiltration involves North Korean nationals securing positions within **U.S. tech firms**, potentially exposing sensitive information and intellectual property. The situation underscores the need for **enhanced vetting processes** and **cybersecurity measures** to protect against such threats.

Evan Axelbank's report highlights the urgency of addressing this issue, as the presence of these workers could have **far-reaching implications** for national security and the integrity of the tech sector.

North Korean workers are inundating tech companies in the Tampa Bay area and around the United States. Evan Axelbank reports.

Exclusive: North Korean Tech Infiltration in U.S. Companies Uncovered

### The Perfect Applicant
On paper, the first candidate looked perfect. Thomas was from rural Tennessee and had studied **computer science** at the University of Missouri. His résumé indicated he had been a **professional programmer** for eight years and breezed through a preliminary **coding test**. This was excellent news for Thomas’ prospective boss, Simon Wijckmans, founder of the web security startup C.Side, who was looking for ambitious, **fully remote coders**.

### The Interview Surprise
However, during the Google Meet interview, Wijckmans was surprised to find himself speaking with a heavily accented young man of **Asian origin** instead of the expected Anglo-Saxon Thomas. The call was plagued by a **laggy internet connection**, and Thomas seemed more interested in salary than the actual work. This raised red flags for Wijckmans.

### A Growing Concern
As Wijckmans continued interviewing candidates, he noticed a pattern: applicants with Anglo names, poor internet connections, and a singular focus on salary. He discovered that many were using a **VPN** to mask their true locations. He had unknowingly stumbled upon an audacious **global cybercrime operation** involving North Korean IT workers.

### The Role of Facilitators
Meanwhile, Christina Chapman, a seemingly ordinary woman from Minnesota, became a key player in this operation. Initially recruited to help find remote employment for overseas workers, her role escalated to facilitating jobs for **North Korean operatives**. Chapman signed fraudulent documents, handled salaries, and maintained a **laptop farm**, where fake employees operated remotely while appearing to be in the US.

### The North Korean IT Scheme
North Korean intelligence has been training young IT workers for years, sending them abroad in teams to find remote jobs with Western companies. They use **stolen identities** and often employ AI to pass tests and interviews. Once hired, they need local facilitators like Chapman to manage their operations without raising suspicion.

### A Growing Threat
The **US government** estimates that these operations can generate up to **$3 million annually** for North Korea, funding everything from Kim Jong Un’s personal slush fund to the country’s nuclear program. Companies are urged to conduct rigorous due diligence, as AI tools make it easier for fraudsters to bypass traditional hiring checks.

### The Evolving Landscape
As remote work opportunities expanded during the pandemic, the North Korean IT scam grew significantly. The potential risk from even one minute of access to systems is immense, and the consequences of hiring a fake employee can be devastating. Experts emphasize the need for enhanced security measures and awareness of these evolving tactics in the hiring process.

### Conclusion
As Simon Wijckmans continues to uncover the truth behind these deceptive applicants, the threat posed by North Korean operatives remains a pressing issue for companies worldwide. With technology constantly advancing, vigilance and adaptability are crucial in navigating this complex landscape.

For years, North Korea has been secretly placing young IT workers inside Western companies. With AI, their schemes are now more devious—and effective—than ever.

Unmasking the Deceptive World of North Korean IT Workers: The AI Connection

## Staffing Cuts Threaten National Security  
Looming staffing cuts to **America's security and intelligence agencies** could have a **devastating effect** on both **cybersecurity** and **national security**, as highlighted by former NSA official Rob Joyce during a House Select Committee hearing on the **Chinese Communist Party**.  
  
Joyce expressed grave concerns that the elimination of roles as part of **President Trump's cost-cutting drive** could severely hinder efforts against the **People's Republic of China (PRC)**, which is considered the world's largest state cyber-spying operation.  
  
> *"I want to raise my grave concerns ..."*  
  
The Trump administration's focus on cutting probationary workers is alarming, especially with **140 layoffs** already reported at **CISA**, the **Homeland Security's cybersecurity advisory organization**. Joyce warned that these cuts would destroy a pipeline of **top talent** critical for combating PRC threats.  
  
> *"Eliminating probationary employees will destroy a pipeline of top talent essential for hunting and eradicating PRC threats,"* Joyce stated.  
  
He added that even if positions remain, the **uncertainty** in the current environment compels skilled workers to seek opportunities elsewhere, jeopardizing national security.  
  
### The Broader Impact  
Joyce's concerns were echoed by Laura Galante, a former director at the **Cyber Threat Intelligence Integration Center**, who emphasized that the loss of experienced personnel would hinder the training of replacements, which is crucial for maintaining cybersecurity standards.  
  
> *"This will be a significant blow...we need the people who have been brought in to stay."*  
  
The threat from the PRC is not limited to personnel issues. Dr. Emma Stewart, chief power grid scientist at the **Idaho National Laboratory**, noted that the US electricity grid faces significant risks from Chinese surveillance and that losing experienced staff would exacerbate these vulnerabilities.  
  
### Cyber Threats from China  
Joyce also highlighted recent cyberattacks, such as **Salt Typhoon** and **Volt Typhoon**, illustrating the extent of China's infiltration capabilities. He warned about the potential risks posed by **TP-Link**, a major US wireless router manufacturer, which he claimed could facilitate spying through government mandates.  
  
> *"Some of these devices just aren't securable."*  
  
Both Joyce and Dr. Stewart called for a **funded policy** to remove Chinese equipment from critical infrastructure, emphasizing that making informed choices about security equipment is essential.  
  
Joyce concluded by stressing the importance of maintaining a robust cybersecurity stance against adversaries like **Russia**, indicating that any pause in cyberattacks could lead to dire consequences for national security.

Would 'destroy a pipeline of top talent essential for hunting' Chinese spies in US networks, Congress told

Former NSA Official Warns: Trump’s Staff Cuts Could Cripple US National Security

## The Rise of Cybersecurity and IT Jobs

The fast-growing fields of **cybersecurity** and **IT** are attracting thousands of tech workers across the country. Some cities are becoming **hubs** for professionals in these fields, significantly impacting their **salary**, **career growth**, and **success**.

## Ranking the Best Cities

According to a study by **Liquid Web**, the best cities for cybersecurity and IT professionals were ranked based on factors such as **earnings**, **opportunities**, and **career trajectories**. Ryan MacDonald, Chief Technology Officer at Liquid Web, emphasizes, “The future of tech careers hinges on **opportunity** and **accessibility**.” He suggests that companies should focus on **tech hubs** to attract and retain talent, while policymakers must work on fostering **affordability** and **job growth** to remain competitive.

![Cybersecurity and IT Jobs](https://i.kinja-img.com/image/upload/c_fit,q_60,w_645/6902508ea44aaf482e0227194d508a45.jpg)
*Photo: Cravetiger (Getty Images)*

## What’s Next?

Check out which **seven cities** were ranked the highest for cybersecurity and IT job opportunities.

The list accounts for earnings, opportunities, and career trajectories

Discover the Top 7 American Cities for Thriving Cybersecurity and IT Careers

### Shocking Arrests in IT Job Fraud

The **FBI** has arrested two US citizens, **Erick Ntekereze Prince** and **Emanuel Ashtor**, for allegedly helping **North Koreans** secure remote IT jobs from US companies. This fraudulent scheme involved using fake identities and addresses to apply for jobs, allowing North Koreans to access company laptops remotely.

### The Laptop Farm Operation

Ashtor operated a "**laptop farm**" in North Carolina, where he managed company-issued computers on behalf of the North Koreans, deceiving their employers. The duo also set up two front companies, **Taggear Inc.** and **Vali Tech Inc.**, masquerading as staffing agencies for remote IT workers.

### Identity Fraud and Payment

North Koreans utilized forged identity documents, even paying a **Sweden-based** national, **Pedro Ernesto Alonso De Los Reyes**, for his identity on job applications. The **US Department of Justice** has indicted Alonso and two North Koreans, **Jin Sung-Il** and **Pak Jin-Song**, related to this scheme. Over a span of **six years**, the North Koreans managed to deceive at least **64 US companies**, earning **$866,255** in total, with payments of **$89,000** to Prince and **over $40,000** to Ashtor.

### Targeted Companies and Risks

While no specific victim companies were named, the indictment highlighted that the conspiracy targeted a **San Francisco tech company**, a **Florida-based cruise line**, and a **US multinational retail corporation**. This operation raises significant concerns about **cybersecurity**, as the FBI has warned that North Korean IT workers exploit unauthorized access to exfiltrate sensitive data and engage in cyber-criminal activities.

### Growing Threat and Response

The US is intensifying efforts to combat such schemes, as these IT workers can earn up to **$300,000 annually**, with funds often funneled back to the **North Korean government**. Experts warn that these operations may expand into **Europe**, making it crucial for companies to enhance their **vetting processes** when hiring remote employees.

One of the suspects, Emanuel Ashtor, allegedly ran a 'laptop farm' at his North Carolina residence to help North Koreans pretend they were working from within the US.

Unbelievable Scheme: US Citizens Arrested for Assisting North Koreans in Remote IT Jobs!

## The Evolving Role of the CISO  
The **Chief Information Security Officer (CISO)** role is becoming increasingly complex and critical. With the potential for **irreversible harm** to an organization's reputation and finances following a breach or attack, the responsibilities of cyber leaders are growing, particularly with added government regulations and compliance issues.  

Despite the **steady increase in CISO salaries**, there is a significant **lack of formal training** for security leaders. According to a study by **ISC2**, less than **63% of respondents** reported having received formal training, with **81%** having learned leadership skills primarily by observing others.  

> “Allowing cybersecurity professionals to learn primarily by observing leaders may perpetuate bad habits,” the report warns.  

## Essential Skills for Cybersecurity Leaders  
The ISC2 report highlights that **communication** is the most critical quality for cybersecurity leaders, with **85%** of those surveyed ranking it first. Other vital leadership skills include:  
- **Strategic Thinking** (41%)  
- **Open-Mindedness** (37%)  
- **Technical Skills** (33%)  
- **Decisiveness** (21%)  
- **Business Acumen** (20%)  

### Importance of Soft Skills  
Experts emphasize the need for **soft skills** among cybersecurity leaders to manage their teams effectively. **Trey Ford**, CISO at Bugcrowd, notes that leaders must speak the language of their audience, which requires empathy, communication, and a grasp of legal and ethical considerations.  

## Focus on Communication  
Communication and strategic thinking are in high demand for cyber leaders. Ford encourages CISOs to view themselves as orchestra conductors, honing their soft skills through non-traditional educational avenues like executive education and business school.  

**Alberto Farronato**, VP of Marketing at Oasis Security, underscores the significance of communication in securing identities and aligning multiple stakeholders during incidents.  

## Addressing the Training Gap  
The absence of formal leadership training hampers effective communication, especially during crises. **Agnidipta Sarkar**, VP of CISO Advisory at ColorTokens, points out that organizations risk greater repercussions from incidents due to insufficient training.  

### Steps Organizations Can Take  
Investing in leadership training can yield long-term benefits. **Kate Terrell**, Chief HR Officer at Menlo Security, asserts that formal training helps leaders navigate **VUCA** (Volatile, Uncertain, Complex, and Ambiguous) environments effectively.  

Organizations are encouraged to integrate leadership training into career development and create structured progression plans. **Brandon Williams**, CTO of Conversant Group, suggests regular assessments of leadership skills through peer reviews and feedback.  

By prioritizing leadership development, organizations can empower their cybersecurity professionals to better manage risks and lead effectively.

As the CISO’s role takes on additional complexity, tech and security pros looking to move into these positions lack the formal training to help them mature into leadership. Here’s what can help change that.

Unlocking Leadership Potential: Why Cybersecurity Professionals Need Formal Training

With the growing national **cybersecurity crisis**, the U.S. is facing a staggering **750,000-person shortfall** in qualified talent. This gap poses significant challenges, but it also presents a unique opportunity to tap into the **veteran workforce**. Fairfax County, VA, has emerged as a leader in **cybersecurity**, defense, and national security, making it an ideal region for veterans transitioning from military service to civilian careers.

### Veterans: The Key to Closing the Cybersecurity Workforce Gap
Fairfax County is home to over **65,000 veterans**, creating a robust talent pool for defense and cybersecurity companies. Many veterans possess **valuable skill sets** and security clearances, making them highly sought after for national security positions. As the Department of Defense (DoD) and contractors work to fill **cybersecurity roles**, veterans are stepping up as a critical resource.

Victor Hoskins, President and CEO of the Fairfax County Economic Development Authority, highlights that the county has experienced growth in **defense and aerospace companies**, with over **70 companies** in the space industry either moving or expanding operations in the area over the past three years.

### Creating Pathways to Careers in Cybersecurity
Fairfax County is proactively developing **pathways for veterans** to connect with the thriving cybersecurity sector. Initiatives like the **Virginia Values Veterans (V3)** program help veterans transition into high-demand tech jobs. With **550 cybersecurity companies** employing over **113,000 cyber professionals**, the county regularly hosts career fairs to connect veterans and students with opportunities.

The region collaborates with educational institutions like **George Mason University** to create a future talent pipeline, inspiring **2,000 local students** this year through hands-on learning opportunities funded by the county.

### Living and Working in Northern Virginia
What sets Fairfax County apart is its **comprehensive support system** for workers. With a **72% workforce participation rate**, the county demonstrates vibrant employment opportunities and a commitment to a balanced work-life environment. While traffic can be challenging due to proximity to **Washington, D.C.**, the county is investing in transportation infrastructure to ease commuting for tech workers.

### A Place for Veterans to Thrive
For veterans transitioning to civilian life, Fairfax County is a promising environment where they can succeed in the **national security** and **cybersecurity** sectors. Through career fairs, educational initiatives, and direct connections to companies, the region offers a robust support system. As the cybersecurity sector continues to grow, veterans with security clearances and technical expertise will play a crucial role in securing the nation’s future. Fairfax County is not just welcoming veterans but actively investing in their futures—one career at a time.

Fairfax County is home to a growing number of defense and cybersecurity companies, alongside an ever-expanding pool of veteran talent.

Get the top stories by email