All four websites identified by cybersecurity firm SentinelOne as North Korean fronts on Thursday had a statement in English and Korean saying they had been seized pursuant to a warrant issued by the US District Court of Massachusetts as part of a “coordinated law enforcement action” against the North Korean government. SentinelOne researchers traced the front companies to a larger set of organizations based in China.
A CNN investigation that year found that North Korean operatives were aggressively trying to infiltrate US cryptocurrency and other tech firms by posing as other nationalities. One American entrepreneur told CNN that, according to the FBI, his company had unwittingly sent tens of thousands of dollars to the North Korean government. In some cases, the North Koreans may be getting help from Americans.