美国司法部警告称，为朝鲜政权工作的黑客越来越依赖美国人来协助对美国公司进行黑客攻击。
The U.S. Department of Justice is warning that hackers working for the North Korean regime are increasingly relying on Americans to facilitate the hacking of U.S. companies.
周二，检察官在一份声明中表示，他们已起诉并逮捕至少两人，并在德克萨斯州对数十个疑似“笔记本电脑农场”进行了搜查。这些电脑据称被朝鲜人用于远程入侵美国公司并窃取敏感数据。
In an announcement on Tuesday, prosecutors said they have indicted and arrested at least two people, and conducted searches across dozens of suspected “laptop farms” in Texas. The computers were allegedly used by North Koreans to remotely hack into American companies and steal sensitive data.
司法部称，联邦当局查获了超过180台电脑，他们认为这些电脑是美国公司寄给新雇员的，却未意识到这些人其实是被制裁的朝鲜间谍，他们利用被盗的美国公民身份获取了工作。司法部表示，他们在德克萨斯州突袭了超过40个笔记本电脑农场，这是目前披露的用于协助朝鲜黑客攻击的住宅和居所中数量最多的，这些场所至少由两名美国协助者所有。
According to the DOJ, federal authorities seized over 180 computers that they believe American companies had shipped out to their newly hired employees, not realizing that they were sanctioned North Korean spies who had used stolen identities of U.S. citizens to gain employment. The DOJ said that it raided over 40 laptop farms across Texas, the largest disclosed number of homes and residences used for facilitating North Korean hacks, which were owned by at least two American facilitators.
CrowdStrike表示，该公司曾协助FBI调查和破坏朝鲜最新的黑客行动，称笔记本电脑农场对朝鲜“至关重要”，因为它们帮助黑客克服了因不实际身处美国而带来的物理、财务和法律挑战。
CrowdStrike, which helped the FBI investigate and disrupt the latest North Korean operations, said that laptop farms are “vital” to North Korea in helping its hackers overcome physical, financial, and legal challenges of not physically being in the United States.
检察官称，至少70家总部位于美国的公司被黑客渗透，这些黑客被认为已窃取约300万美元。司法部未点名受影响的公司，但将其描述为遍布俄亥俄州及另外16个州（包括哥伦比亚特区）的医疗、网络支持、零售、通信和制造业部门。
The prosecutors said at least 70 U.S.-based companies had been infiltrated by the hackers, who are believed to have generated around $3 million in stolen funds. The DOJ did not name the affected companies, but described them as healthcare, cyber support, retail, communications, and manufacturing sectors across Ohio and 16 other states, including the District of Columbia.
司法部表示：“越来越多的朝鲜IT工人转向招募美国协助者，以应对私营部门检测能力的提升和执法行动的加强。这些工人雇佣协助者来完成更广泛的任务，在某些情况下甚至将整个工作外包给第三方外国人。”
“Increasingly, North Korean IT workers are turning to recruiting American facilitators to counter improved private sector detections and law enforcement actions. These workers are hiring facilitators to complete a wider variety of tasks, and in some cases subcontracting entire jobs to third-party foreign nationals,” the Justice Department said.
经常，朝鲜黑客使用看起来真实的电子邮件地址、伪造的领英资料以及大量的在线和社交媒体账户作为其活动的掩护。
Oftentimes, North Korean hackers use real-looking email addresses, spoofed LinkedIn profiles, and extensive online and social media accounts as cover for their activities.
在另一份公共服务公告中，FBI表示，有“数千”名受朝鲜国家控制的IT工人在西方公司工作，他们“构成重大国家安全和知识产权盗窃内部威胁。”这是近年来美国针对朝鲜活动的最新一波逮捕、起诉和执法行动。该叛逃政权利用这一“远程IT工人”计划，使朝鲜人能够在美国和欧洲公司获得就业机会，赚取工资，然后在作为员工期间窃取敏感信息和知识产权。受害公司随后被勒索，要求向黑客支付更多费用。
In a separate public service announcement, the FBI said that there are “thousands” of North Korean-state controlled IT workers working at Western companies, which “pose a significant national security and intellectual property theft insider threat.”This is the latest wave of arrests, indictments, and enforcement action targeting North Korean activities in the United States in recent years. The breakaway regime has used this “remote IT workers” scheme to allow North Koreans to gain employment with U.S. and European companies, earn a wage, and then steal sensitive information and intellectual property while as employees. The victim companies are then extorted into paying the hackers further.
远程IT工人计划是朝鲜政权旨在产生的多条非法收入来源之一，还包括黑客攻击加密货币交易所和开源开发者项目，目的是为其国际制裁的核武器计划提供资金。据信，该政权仅在2025年就窃取了至少20亿美元的加密货币。
The remote IT workers’ scheme is one of several strands of illicit revenue that the North Korean regime aims to generate, including hacking crypto exchanges and open-source developer projects, with the aim of funding its internationally sanctioned nuclear weapons program. The regime is thought to have stolen at least $2 billion in crypto during 2025 alone.
朝鲜问题专家认为，被黑客攻击的公司数量和被盗加密货币的数量可能远高于已报告的数字。
Experts on North Korea have put the number of hacked companies and the amount of stolen crypto as likely much higher than reported.
今年早些时候，CrowdStrike在另一份报告中表示，朝鲜黑客过去一年内大约一半的所有有记录的“亲手键盘”入侵事件的幕后黑手，指的是由人类而非自动化工具或AI实施的黑客攻击。
Earlier this year, CrowdStrike said in a separate report that North Korean hackers were behind around half of all documented “hands-on-keyboard” intrusions over the past year, referring to hacks that are carried out by humans and not automated tools or AI.