Defense Contractor Pleads Guilty to Aiding North Korean Remote Worker Scheme
Defense Contractor Pleads Guilty to Aiding North Korean Remote Worker Scheme
A defense contractor with top secret security clearance has pleaded guilty to aiding North Korea’s remote worker scheme by allowing co-conspirators to use his identity to apply for jobs, including positions with national security implications, the Justice Department announced on Wednesday. 🚨
John Allen Kurrle Jr. participated in a short-lived but prolific conspiracy that spanned at least 88 job applications at U.S.-based companies, resulting in nine job offers, according to court records. The 62-year-old allowed co-conspirators to use his identity and government clearance for prospective sensitive work, often with U.S. government contractors. 💼
The nine job offers Kurrle’s co-conspirators received between June and October 2025 had annual salary ranges of $120,000 to $190,000. The longest and most lucrative job a co-conspirator landed under Kurrle’s identity lasted about three weeks, netting a total pay of $4,800. 💰
His identity was also used to gain employment as a software engineer at a Ventura, California-based company to work on a generative AI project for a component of the U.S. military. The company sent a laptop to Kurrle’s residence in Gainesville, Virginia, where he received and hosted laptops shipped by multiple victim companies, enabling co-conspirators to remotely access the devices from outside the United States. 🌍
During a video call to verify employment eligibility, the company noticed that the person who appeared on the video call did not match Kurrle’s age or physical characteristics, according to court records. The unnamed company terminated the employment of Kurrle’s co-conspirator before he did any work on the military contract, and Kurrle shipped the laptop back to the company. The company paid Kurrle’s co-conspirator almost $2,200 for 32 hours of onboarding, which Kurrle is now ordered to pay in restitution along with the $4,800 received from the other company. ⚖️
Additionally, Kurrle, as part of his plea agreement, admitted to using the identity of a third person, without their consent, to apply for some remote work positions. He doesn’t dispute that the scheme likely benefitted North Korea but claims he wasn’t aware of the connections to North Korea during the duration of his involvement in the conspiracy.
Michael Barnhart, a nation-state investigator at DTEX, stated that researchers previously identified Kurrle as a facilitator for North Korea’s remote worker scheme. The case underscores North Korea’s efforts to gain access to roles with a strategic intelligence requirement, as it focuses on contractor roles because those present the path of least resistance. 🚧
Kurrle joins a growing list of individuals who have been charged or jailed for supporting the North Korean regime’s scheme that generates hundreds of millions of dollars annually for the country’s military and organizations involved in its weapons programs. Authorities have been cracking down on the malicious insider activity by seizing cryptocurrency linked to the theft and targeting U.S.-based facilitators who provided forged or stolen identities and hosted laptop farms for North Korean operatives. 🔍
Some of that money is also funneled through a web of front companies and intermediaries, including sanctioned entities, that partly fund Russia’s war effort against Ukraine, DTEX reported in July. The scheme is widespread and has infiltrated an undetermined number of businesses, including hundreds of Fortune 500 companies. Kurrle pleaded guilty to conspiracy to commit wire fraud and faces up to 20 years in prison upon sentencing, which is currently scheduled for January 28, 2027. ⏳