The department alleges that a North Carolina-based laptop farm enabled access for two North Korean nationals over the course of the scheme.

The North Korean office responsible for the scheme, Department 53, was created to funnel money back into the country’s weapons programs.

The individuals are allegedly working for North Korea’s 313th General Bureau, under the DPRK’s Ministry of Munitions Industry.

It’s part of a broader effort to counter Pyongyang’s use of tech professionals to fool U.S. companies and nonprofits.

SecureWorks has released research that dives into the tell-tale behaviors behind remote employees that may be working on behalf of North Korea.