A Virginia man working for a federal defense contractor has admitted his role in a scheme to dupe American companies into hiring North Korean information technology workers whose wages were ultimately funneled toward the regime’s military programs.
John Allen Kurrle Jr., 62, pleaded guilty Wednesday to conspiracy to commit wire fraud, the U.S. Attorney’s Office of Virginia’s Eastern District announced
.Kurrle’s plea agreement came on the same day that the U.S. Treasury’s Office of Foreign Assets Control issued sanctions against 10 people and one entity for participating in similar schemes that it said funded the Democratic Republic of North Korea’s weapons of mass destruction and ballistic missile programs.
“The North Korean regime continues targeting
and exploiting American companies through fraudulent activities conducted by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments,” U.S. Treasury Secretary Scott Bessent said in a separate news release.
According to court documents, Kurrle held an active Top Secret security clearance between June and October 2025 that gave him access to restricted intelligence data.
During that time, prosecutors said, Kurrle helped defraud American companies by allowing foreign nationals to apply for remote job positions using borrowed identities – his own as well as that of an unsuspecting second person.
The companies included U.S. government contractors. Nine applications resulted in American job offers.
Additionally, the documents said, Kurrle had laptops from targeted companies sent to his home in Gainesville, in suburban Washington, D.C., on which he enabled remote access to people outside the United States so that the companies would think the remote workers were domestically based.
According to the U.S. Attorney’s Office, the scheme is part of a broader North Korean government strategy to employ thousands of information technology workers in remote positions around the world to boost government income while evading economic sanctions.
Such fraud is aided by U.S. residents who earn fees for receiving and hosting computers and other hardware issued by victim companies, the office said.
In his plea agreement, Kurrle did not dispute that the wages earned by the hired workers he enabled would eventually benefit the North Korean government but said he was unaware of those connections during his participation in the scheme.
Kurrle, who is scheduled to be sentenced on Jan. 28, 2027, faces up to 20 years in prison.
In a statement, Kurrle's attorney, Assistant Federal Public Defender Nate Wenstrup said his client had accepted full responsibility for his conduct.
"As the government agreed (in the Statement of Facts)," Wenstrup said, "Mr. Kurrle was unaware of the connections to North Korea during his involvement in the conspiracy."
North Korea has been under United Nations sanctions since 2003, primarily because of its nuclear weapons program. The U.S. has also had trade and economic sanctions in place on North Korea since 2016.
Those sanctioned this week by the Treasury Department include a North Korean-controlled entity based in Russia that used IT workers to raise money for the North Korean government.
Additionally, six North Korean IT staffers working on that entity’s behalf, two North Korean nationals leading a separate Russian-based delegation of similar IT workers and a Russian national who served as an intermediary handling illicit financial transactions were also sanctioned.
According to the Treasury Department, North Korea relies on fraudulent documents, stolen identities, and fabricated personas to clandestinely secure IT employment with legitimate companies in the U.S. and its allies. The regime then appropriates most of these workers’ wages, generating hundreds of millions of dollars.
Such schemes allowed North Korea to raise nearly $800 million for its weapons programs in 2024, the department said.
“These networks have leveraged sophisticated cryptocurrency transactions, money laundering techniques and emerging technologies, including artificial intelligence tools, to generate and transfer millions of dollars for the DPRK government,” the Treasury Department said.
In addition to generating revenue, the department said, fraudulently placed North Korean IT workers have exploited access to corporate networks to deploy malware and steal sensitive data.
This article originally appeared on USA TODAY: US defense contractor admits role in North Korean IT plot
