Maryland Man with FAA Contractor Laptop Sentenced for Brokering Access to US Firms
Published
Key Takeaways
- Credential Misuse: A Maryland resident admitted facilitating foreign access to U.S. firms.
- Remote access fraud: He used false credentials to hold developer roles.
- Impact: The activity impacted networks supporting federal programs, including the FAA.
A federal judge sentenced Minh Phuong Ngoc Vong, 40, for enabling foreign operators to enter U.S. tech networks. The case is linked to North Korean revenue and access efforts, by the DOJ.
Investigators found foreign developers using Vong’s credentials in U.S. company systems. A few of the companies supported federal programs, including the Federal Aviation Administration (FAA).
Insider Threat: Identity Misuse
The DOJ press release mentioned that the logins on the device came from China and masked the operators behind them. Companies learned that Vong did not perform the hired developer work and instead shared the login access to “John Doe” in China.
They completed tasks hiding the location. Later, Vong applied for other developer jobs using false experience claims. He provided valid U.S. documents during remote interviews to pass checks.
Vong was sentenced for the following:
- Using false credentials.
- Enabling operators to secure developer jobs.
- Allowing foreign operators to use his access to U.S. companies.
- Installing remote-access tools.
- Transferring his earnings to overseas conspirators.
- Defrauding about 13 companies between 2021 and 2024.
Remote Access Scheme
Vong was hired under the belief that he met the skill and citizenship requirements. The group obtained about one million dollars from at least thirteen employers over three years..
The placements included roles that allowed access to sensitive government systems through private contractors. “John Doe” coordinated the scheme from China near North Korea’s border. Investigators believe he is a North Korean national, the DOJ press release added.
Details Related to the Cybercrime
Vong admitted the fraud and that he enabled foreign access and earned about $28,000 from one of the contractor jobs. The FAA authorized Vong for a Personal Identity Verification (PIV) card. This would have allowed access to federal facilities and systems.
In March 2023, Vong joined an online interview with a Virginia tech firm. To prove his identity, he used a state license and a U.S. passport. He got hired and placed on a Federal Aviation Administration contract.
He also received a company laptop, while the FAA approved a Personal Identity Verification (PIV) card for system and facility access.
Over 13 U.S. companies were defrauded between 2021 and 2024. He was sentenced to 15 months in prison followed by three years of supervised release
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular