A U.S. Justice Department indictment charges four North Korean nationals with posing as remote IT workers, gaining developer roles at blockchain-related companies, and stealing more than $900,000 in virtual currency. The alleged scheme used stolen or fraudulent identities to conceal DPRK nationality, including employment under a stolen identity and aliases at an Atlanta blockchain R&D company and a Serbian virtual token company. After obtaining trusted access, the defendants allegedly stole about $175,000 and $740,000 in separate incidents, including one theft carried out by modifying smart-contract source code. The funds were laundered through a virtual currency mixer and exchange accounts opened under aliases with fraudulent Malaysian identification documents. The case matters for DPRK tracking because it ties remote-worker infiltration, insider access, cryptocurrency theft, and sanctions-evasion revenue generation into a single law-enforcement action.