US defense contractor admits role in North Korean IT plot

US defense contractor admits role in North Korean IT plot.

Key points

• According to court documents, Kurrle held an active Top Secret security clearance between June and October 2025 that offered him access to restricted intelligence data.
• Such schemes allowed North Korea to raise almost $800 million for its weapons programs in 2024, the department stated.
• North Korea has been under United Nations sanctions since 2003, primarily since of its nuclear weapons program.
• In an official note, Kurrle's attorney, Assistant Federal Public Defender Nate Wenstrup remarked his client had accepted full responsibility for his conduct.
• John Allen Kurrle Jr., 62, pleaded guilty Wednesday to conspiracy to commit wire fraud, the U.S.

US defense contractor admits role in North Korean IT plot. Marc Ramirez USA TODAY. Defense contractor employee admits role in North Korean remote job scheme.

Meanwhile, a Virginia defense contractor employee has admitted helping firms unknowingly hire North Korean information technology workers.

Notably, a Virginia man working for a federal defense contractor has admitted his role in a scheme to dupe American firms into hiring North Korean information technology workers whose wages were ultimately funneled toward the regime's military programs.

John Allen Kurrle Jr., 62, pleaded guilty Wednesday to conspiracy to commit wire fraud, the U.S. Attorney's Office of Virginia's Eastern District confirmed.

Kurrle's plea agreement came on the same day that the U.S. Treasury's Office of Foreign Assets Control issued sanctions against 10 individuals and one entity for participating in similar schemes that it stated funded the Democratic Republic of North Korea's weapons of mass destruction and ballistic missile programs.

"The North Korean regime continues targeting and exploiting American companies through fraudulent activities conducted by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments, " U.S. Treasury Secretary Scott Bessent remarked in a separate news release.

During that time, prosecutors remarked, Kurrle assisted defraud American firms by allowing foreign nationals to apply for remote job positions using borrowed identities – his own as well as that of an unsuspecting second person.

Meanwhile, the firms included U.S. Administration contractors. Nine applications resulted in American job offers.

Additionally, the documents remarked, Kurrle had laptops from targeted businesses sent to his home in Gainesville, in suburban Washington, D.C., on which he enabled remote access to individuals outside the United States so that the businesses would think the remote workers were domestically based.

According to the U.S. Attorney's Office, the scheme is part of a broader North Korean administration strategy to employ thousands of information technology workers in remote positions worldwide to boost administration income while evading economic sanctions.

Such fraud is aided by U.S. Residents who earn fees for receiving and hosting computers and other hardware issued by victim firms, the office stated.

In his plea agreement, Kurrle did not dispute that the wages earned by the hired workers he enabled would eventually benefit the North Korean administration but stated he was unaware of those connections during his participation in the scheme.

Kurrle, who is scheduled to be sentenced on Jan. 28, 2027, faces up to 20 years in prison.

"As the government agreed (in the Statement of Facts), " Wenstrup remarked, "Mr. Kurrle was unaware of the connections to North Korea during his involvement in the conspiracy."

North Korea has been under United Nations sanctions since 2003, primarily since of its nuclear weapons program. The U.S. Has additionally had trade and economic sanctions in place on North Korea since 2016.

Those sanctioned this week by the Treasury Department include a North Korean-controlled entity based in Russia that applied IT workers to raise capital for the North Korean administration.

Additionally, six North Korean IT staffers working on that entity's behalf, two North Korean nationals leading a separate Russian-based delegation of similar IT workers and a Russian national who served as an intermediary handling illicit financial transactions were additionally sanctioned.

According to the Treasury Department, North Korea relies on fraudulent documents, stolen identities, and fabricated personas to clandestinely secure IT employment with legitimate firms in the U.S. And its allies. The regime then appropriates most of these workers' wages, generating hundreds of millions of dollars.

"These networks have leveraged sophisticated cryptocurrency transactions, money laundering techniques and emerging technologies, including artificial intelligence tools, to generate and transfer millions of dollars for the DPRK government, " the Treasury Department remarked.

Along with generating revenue, the department remarked, fraudulently placed North Korean IT workers have exploited access to corporate networks to deploy malware and steal sensitive data. Share your feedback to support improve our site!

For now, US defense contractor admits role in North Korean IT plot remains the part of the story worth watching, and further updates are likely as more details are confirmed.