Castle Rock police recover drugs, weapons in traffic stop
The Castle Rock Police Department posted about the bust on Facebook. The police department said officers initiated a traffic stop near the intersection of Wilcox Street and Plum Creek Parkway, just east of Interstate 25.
Caught on camera: Local Western wear business hit by thief at two locations days apart
Castle Rock Police Department's B-side Watch III team was called to investigate, and the scene turned into more than just a traffic stop.
After searching the vehicle, Castle Rock police recovered:
48.02 grams of fentanyl
8.01 grams of methamphetamine
Large sum of cash
Counterfeit bills
To compare, the U.S. Drug Enforcement Agency said two milligrams of fentanyl can be deadly.
Castle Rock police said the driver was in possession of a handgun and a switchblade knife, and had a warrant out for their arrest.
Man charged with first-degree murder in deadly shooting at adult venue
Police told FOX31 the suspect was arrested on charges of:
Special offender – Class 1 drug felony
Unlawful distribution, manufacturing, dispensing, sale, or possession of Schedule II narcotic – Class 2 drug felony
Forgery – Class 5 felony
Fugitive of justice – Traffic offense failure to appear
'Our officers are out there 24/7 keeping our community safe through proactive policing efforts,' said Operations Commander Sam Varela to FOX31. 'Every time we're able to remove these dangerous and illegal substances from our streets, we further our mission of creating a safe and secure environment for our residents, visitors and business owners.'
Copyright 2025 Nexstar Media, Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles

Los Angeles Times
an hour ago
- Los Angeles Times
Trump's politically motivated sanctions against Brazil strain relations among old allies
SAO PAULO — President Trump has made clear who his new Latin America priority is: former Brazilian President Jair Bolsonaro, a personal and political ally. In doing so, he has damaged one of the Western hemisphere's most important and long-standing relationships, by levying 50% tariffs that begin to take effect Wednesday on the largest Latin America economy, sanctioning its main justice and bringing relations between the two countries to the lowest point in decades. The White House has appeared to embrace a narrative pushed by Bolsonaro allies in the U.S., that the former Brazilian president's prosecution for attempting to overturn his 2022 election loss is part of a 'deliberate breakdown in the rule of law,' with the government engaging in 'politically motivated intimidation' and committing 'human rights abuses,' according to Trump's statement announcing the tariffs. The message was clear earlier, when Trump described Bolsonaro's prosecution by Brazil's Supreme Court as a 'witch hunt' — using the same phrase he has employed for the numerous investigations he has faced since his first term. Bolsonaro faces charges of orchestrating a coup attempt to stay in power after losing the 2022 election to President Luiz Inácio Lula da Silva. A conviction could come in the next few months. The U.S. has a long history of meddling with the affairs of Latin American governments, but Trump's latest moves are unprecedented, said Steven Levitsky, a political scientist at Harvard University. 'This is a personalistic government that is adopting policies according to Trump's whims,' Levitsky said. Bolsonaro's sons, he noted, have close connections to Trump's inner circle. The argument has been bolstered by parallels between Bolsonaro's prosecution and the attempted prosecution of Trump for trying to overturn his 2020 election loss, which ended when he won his second term last November. 'He's been convinced Bolsonaro is a kindred spirit suffering a similar witch hunt,' Levitsky said. After Bolsonaro's defeat in 2022, Trump and his supporters echoed his baseless election fraud claims, treating him as a conservative icon and hosting him at the Conservative Political Action Conference. Steve Bannon, the former Trump adviser, recently told Brazil's news website UOL that the U.S. would lift tariffs if Bolsonaro's prosecution were dropped. Meeting that demand, however, is impossible for several reasons. Brazilian officials have consistently emphasized that the judiciary is independent. The executive branch, which manages foreign relations, has no control over Supreme Court justices, who in turn have stated they won't yield to political pressure. On Monday, the court ordered that Bolsonaro be placed under house arrest for violating court orders by spreading messages on social media through his sons' accounts. Justice Alexandre de Moraes, who oversees the case against Bolsonaro, was sanctioned under the U.S. Magnitsky Act, which is supposed to target serious human rights offenders. De Moraes has argued that defendants were granted full due process and said he would ignore the sanctions and continue his work. 'The ask for Lula was undoable,' said Bruna Santos of the Inter-American Dialogue in Washington, D.C., about dropping the charges against Bolsonaro. 'In the long run, you are leaving a scar on the relationship between the two largest democracies in the hemisphere.' Three key factors explain the souring of U.S.-Brazil ties in recent months, said Oliver Stuenkel, a senior fellow at the Carnegie Endowment for International Peace: growing alignment between the far-right in both countries; Brazil's refusal to cave to tariff threats; and the country's lack of lobbying in Washington. Lawmaker Eduardo Bolsonaro, Jair Bolsonaro's third son, has been a central figure linking Brazil's far-right with Trump's MAGA movement. He took a leave from Brazil's Congress and moved to the U.S. in March, but he has long cultivated ties in Trump's orbit. Eduardo openly called for Magnitsky sanctions against de Moraes and publicly thanked Trump after the 50% tariffs were announced in early July. Democratic Massachusetts Rep. Jim McGovern, author of the Magnitsky Act, which allows the U.S. to sanction individual foreign officials who violate human rights, called the administration's actions 'horrible.' 'They make things up to protect someone who says nice things about Donald Trump,' McGovern told The Associated Press. Eduardo Bolsonaro's international campaign began immediately after his father's 2022 loss. Just days after the elections, he met with Trump at his Mar-a-Lago estate in Florida. As investigations against Bolsonaro and his allies deepened, the Brazilian far right adopted a narrative of judicial persecution and censorship, an echo of Trump and his allies who have claimed the U.S. justice system was weaponized against him. Brazil's Supreme Court and Electoral Court are among the world's strictest regulators of online discourse: they can order social media takedowns and arrests for spreading misinformation or other content it rules 'anti-democratic.' But until recently, few believed Eduardo's efforts to punish Brazil's justices would succeed. That began to change last year when billionaire Elon Musk clashed with de Moraes over censorship on X and threatened to defy court orders by pulling its legal representative from Brazil. In response, de Moraes suspended the social media platform from operating in the country for a month and threatened operations of another Musk company, Starlink. In the end, Musk blinked. Fábio de Sá e Silva, a professor of international and Brazilian studies at the University of Oklahoma, said Eduardo's influence became evident in May 2024, when he and other right-wing allies secured a hearing before the U.S. House Foreign Affairs Committee. 'It revealed clear coordination between Bolsonaro supporters and sectors of the U.S. Republican Party,' he said. 'It's a strategy to pressure Brazilian democracy from the outside.' Brazil has a diplomatic tradition of maintaining a low-key presence in Washington, Stuenkel said. That vacuum created an opportunity for Eduardo Bolsonaro to promote a distorted narrative about Brazil among Republicans and those closest to Trump. 'Now Brazil is paying the price,' he said. After Trump announced sweeping tariffs in April, Brazil began negotiations. President Lula and Vice President Geraldo Alckmin — Brazil's lead trade negotiator — said they have held numerous meetings with U.S. trade officials since then. Lula and Trump have never spoken, and the Brazilian president has repeatedly said Washington ignored Brazil's efforts to negotiate ahead of the tariffs' implementation. Privately, diplomats say they felt the decisions were made inside the White House, within Trump's inner circle — a group they had no access to. A delegation of Brazilian senators traveled to Washington in the final week of July in a last-ditch effort to defuse tensions. The group, led by Senator Nelsinho Trad, met with business leaders with ties to Brazil and nine U.S. senators — only one of them Republican, Thom Tillis of North Carolina. 'We found views on Brazil were ideologically charged,' Trad told The AP. 'But we made an effort to present economic arguments.' While the delegation was in Washington, Trump signed the order imposing the 50% tariff. But there was relief: not all Brazilian imports would be hit. Exemptions included civil aircraft and parts, aluminum, tin, wood pulp, energy products and fertilizers. Trad believes Brazil's outreach may have helped soften the final terms. 'I think the path has to remain one of dialogue and reason so we can make progress on other fronts,' he said. Pessoa and Riccardi write for the Associated Press. AP writer Mauricio Savarese in Sao Paulo contributed to this report.

CNN
4 hours ago
- CNN
Moldova jails pro-Russian regional leader for election fraud weeks before crucial vote
A court in Moldova has sentenced a Kremlin-friendly regional politician to seven years in prison for funneling money from Russia to finance a political party. Evgenia Gutul, the leader of Gagauzia, a historically pro-Russian ethnic region in southern Moldova, was detained in March on suspicion of electoral fraud and sentenced on Tuesday. Prosecutors said that from 2019 to 2022, Gutul channeled undeclared funds into the country to finance a political party founded by Ilan Shor, Reuters reported. Shor is a pro-Russian businessman who has been convicted of fraud in Moldova and now lives in exile. Gutul's conviction comes just weeks before Moldovans vote in a crucial parliamentary election, in which Maia Sandu, the pro-Western president of the former Soviet country, is hoping to retain her governing majority. Sandu was reelected as president last year in a vote held on the same day as a referendum on joining the European Union, which Moldovans backed by a razor-thin majority. Both votes were marred by what prosecutors said was a massive vote-buying scheme orchestrated by Shor, who has spent much of his time in Russia since he was convicted for his role in the 2014 theft of $1 billion from Moldovan banks. Before the referendum, Moldova's national police chief said some 130,000 citizens had received a total of $15 million from Shor in exchange for voting 'no' or persuading others to do so. The police chief said it was 'clear' that Russia was financing the scheme; Moscow has denied meddling in Moldovan politics. Gutul, a former secretary for Shor's now-banned party, was elected governor of Gagauzia in 2023. That election also drew accusations of vote-buying. Last year, Gutul was sanctioned by the EU for actions 'destabilizing' Moldova and promoting separatism in her region. Gutul denies wrongdoing and claims her prosecution was politically motivated. In March, she penned a letter to Donald Trump, claiming that she, like the US president, had been subjected to 'propaganda efforts and pressure from the corrupt globalist elites.' Responding to her sentencing Tuesday, Gutul said she would appeal the ruling, which she claimed was an attempt to intimidate Gagauzians 'who dare to vote' for a party other than Sandu's Party of Action and Solidarity (PAS). 'This decision has nothing to do with justice. This is a political reprisal, planned and executed on orders from above,' she wrote on Telegram. The Kremlin also claimed the verdict was politically motivated, and that Moldova was systematically suppressing the opposition. 'In effect, people are being deprived of the opportunity to vote for those they prefer. Of course, what we are seeing is a clear violation of democratic rules and norms in this country,' Kremlin spokesperson Dmitry Peskov said Tuesday. Moldova's parliamentary election will be held on September 28. Although Sandu's PAS won by a landslide in the last vote in 2021, Moldova has since faced major economic and security challenges spilling over from Russia's invasion of Ukraine, stirring anti-government sentiment in parts of the country.


CNN
4 hours ago
- CNN
This may look like any other profile photo you'd see on a
In recent years, thousands of North Korean IT workers have used stolen and made-up US identities to pose as Western developers, engineers, and tech consultants to funnel hundreds of millions of dollars a year to Pyongyang's military programs. 'They're everywhere, all over the Fortune 500,' said Michael Barnhart, Principal i3 Insider Risk Investigator at cybersecurity firm DTEX. The North Koreans rely on help from open-source AI and even live face-masking software to hide their true identities and locations during video calls from countries such as China, Laos and Russia. But their ability to embed themselves in corporate America doesn't rely on trickery alone. It requires help from inside the United States. How the operation works LaptopFacilitatorRemote accessRemoteworkersLaptopfarmUScompaniesNorth KoreanIT WorkerUScompany Facilitators in the US help North Korean operatives steal identities and access American financial systems. US companies send them laptops that the North Koreans use to log into corporate networks. Facilitators with many laptops are said to be running 'laptop farms.' Experts say it's difficult to estimate the total number of workers as many of them run multiple identities and work several jobs at the same time. One American woman, Christina Marie Chapman, was last month sentenced to eight-and-a-half years in prison for helping these operatives land jobs at more than 300 companies, generating over $17 million for Kim's heavily sanctioned regime. A prolific TikToker, Chapman charted her remarkable rise in public videos from poverty to international travel, courtesy of a new job in 'a computer business,' that US investigators used to build their case. Chapman is not the only US resident to have participated in the scheme. Recently unsealed federal indictments show other US-based facilitators played a crucial role in the operation – laundering paychecks, stealing identities and running 'laptop farms' that allowed North Korean workers to appear as if they were physically present inside the country. The stealthy operation has allowed North Korea, formally known as the Democratic People's Republic of Korea (DPRK), to circumvent international sanctions, exploit remote hiring practices, and quietly generate hundreds of millions of dollars annually, according to the US Department of Justice – often without employers ever realizing they've hired a North Korean operative. This puts them at risk of violating US sanctions which bar doing business with North Korean individuals or organizations. 'If you take away looking at them as a government and start thinking of them more as kind of a mafia, everything falls into place,' said Barnhart. The DPRK Foreign Ministry addressed the issue in July after the US offered a reward of up to $5 million for information on several North Korean nationals over the alleged IT worker scheme. Rejecting the allegations as an 'absurd smear campaign,' the ministry accused the US of 'fabricating groundless cyber drama.' Drawing on exclusive data sourced from North Korean computers, court records, and interviews with cybersecurity experts and US officials, a CNN investigation reveals the full scope of this scheme – showing how North Korea has turned remote work culture into an effective tool for generating foreign currency and funding its weapons programs, according to a US assessment, putting national security at risk. North Korea showcases military hardware at a parade in Pyongyang in February 2023. Korean Central TV Kim Jong Un's remote workforce Unlike North Korea's more high-profile cyber operations – like billion-dollar crypto thefts or ransomware campaigns – the IT worker scheme is a state-sponsored effort that seeks to place North Korean operatives in Western companies, not as saboteurs, but as employees, experts say. Evolving out of the North Korean scams of the 90s, like fake $100 bills under late leader Kim Jong Il, his son and successor has taken the scam operation online. 'Kim Jong Un is a millennial, and so he has gravitated toward technology a lot more than his father did,' said Barnhart. 'The IT workers are a very large force that they are wanting to continue to beef up.' Barnhart belongs to a group of tight-knit internet sleuths and cybersecurity professionals leading the charge in hunting down North Korean IT workers. For many of them it's more than just a job – Barnhart has a tattoo for every DPRK cyber unit he has busted. North Korean leader Kim Jong Un gives field guidance at the Sci-Tech Complex, in this undated photo released by North Korea's Korean Central News Agency (KCNA) in Pyongyang October 28, 2015. KCNA/Reuters With antiquated technology and little access to unrestricted internet within North Korea, most of these operations are run from abroad. Southeast Asia, and parts of China and Russia near the North Korean border are among the preferred staging areas thanks to their proximity and friendly relations with the regime, according to US prosecutors and cybersecurity experts. Fake resumes and rehearsed lines powered by AI Exclusive datasets, including browser histories and ChatGPT searches from over a dozen North Korean computers, obtained by researchers through open-source analysis and shared with CNN reveal how they engage AI to create job-seeking personas. The datasets show the IT workers looking up LinkedIn and other job-seeking platforms thousands of times, in a matter of months, with some profiles applying for dozens of jobs. Records of their browser histories also confirm what can be seen in their profiles and resumes – consistent use of AI faceswap software, VPNs, remote working software and a heavy reliance on ChatGPT and Google Translate. These operatives are not just using AI to write code or automate tasks – they're using it to fabricate identities, conduct interviews, mimic cultural fluency, and automate applications to apply for jobs en masse. Generic nameCommonly used past experience Many of the fake profiles use common Western names like Paul, Jeremy and Joe, and list previous work experience at major US companies and degrees from prestigious universities. They also alter stock photos using AI to generate fake headshots. These resumes can be enough to secure job interviews, but in video calls they look nothing like their profile photos. On camera they stumble through rehearsed lines about career goals and work ethic, experts and recruiters told CNN. In some cases, they use AI to help them answer the interviewers' questions in real time, or to alter their faces and hide their identity. 'AI is very important to them,' said Barnhart. 'It helps out everything else they're doing.' Outside the professional sphere, AI is also a cultural crutch – helping North Korean workers adapt to American customs and office small talk. ChatGPT records connected to North Korean computers show them asking for New Year's resolutions, guidance on Thanksgiving greetings, and explanations of American football rules. The North Koreans were early adopters of AI tools such as ChatGPT, according to Evan Gordenker, Consulting Director of Unit 42, the threat intelligence arm of cybersecurity firm Palo Alto Networks. He said they were such prolific users of early open-source AI models that they made significant contributions to training and developing the AI we use today. 'Just ask them about who they are and they fall apart' Once you've learned how to spot a North Korean on a job-seeking site, it's hard to not see them everywhere, but the sheer number of automated applications they submit can inundate companies that often outsource their recruiting. Human risk management company KnowBe4 estimates they've received at least 100 applications from suspected North Korean IT workers in the past year. And last summer, they inadvertently hired one. The company needed a software engineer for its internal IT AI team and posted a job advertisement on the company's website as well as external platforms. After going through the usual recruitment process, they hired a person and mailed them their work laptop. As soon as the laptop was received on the other end, it began downloading malware. Brian Jack, KnowBe4's chief information security officer, suspects an American facilitator set off internal alarms by downloading remote working software. The company immediately terminated the new employee and asked for the return of the laptop. It came back in its original packaging with one key addition – a post-it note with the word 'KnowBe4' stuck on it, which Jack said indicates it may have come from a laptop farm. North Korean IT workers inside an office at an undisclosed location. US Department of Justice Since that day, Jack said he's been tasked with making sure a North Korean never slips through the cracks again, and KnowBe4 is now known as one of the leading companies in tracking DPRK workers. Rather than choosing to expose suspected North Korean applicants by asking them about Kim Jong Un or the DPRK regime, Jack prefers a more subtle approach – asking them about their favorite restaurants and hobbies. 'Just ask them about who they are and they fall apart,' Jack said. Most North Koreans' lives are heavily regulated by the state, with no connection to the outside world under the Kim family rule. The North Korean IT workers certainly enjoy a degree of freedom and privilege compared to their compatriots back home, but experts say it's hard to discern how closely they are being monitored, or if their families are being used as leverage. Photos shared by DTEX of a North Korean IT worker office show a CCTV camera looking over a small room, with bare, white walls, where a handful of workers are using computers at cluttered desks. A North Korean tech worker poses inside an office. DTEX There's a watercooler in the corner, and what appears to be laundry drying on a rack. 'There are North Korean victims in this, too,' said Jack. 'People don't get to choose where they're born, so they just got to make the best of what they're doing.' But to make this scheme work, the North Koreans needed help – from within the US. Rags to riches To her 100,000 TikTok followers, Chapman seemed to be a typical suburban, middle-aged American. She shared healthy eating tips in selfie videos posted online. Off camera, she was engaged in covert activity that could have seen her jailed for life. According to a 2024 indictment, Chapman became entangled in the IT worker scheme around October 2020, just as the Covid-19 pandemic was sweeping the US, and companies were quickly transitioning to remote work. In a LinkedIn message, Chapman was approached by someone asking her to 'be the US face' of a company and assist in helping remote IT workers secure jobs in the US, despite having no experience in the tech industry herself. Around that time Chapman had been posting about her financial struggles on TikTok. Shortly after, her North Korean contacts began applying to US companies and government agencies, submitting false information from Chapman to the Department of Homeland Security as proof of employment eligibility, according to the indictment. Simultaneously, Chapman sent false information to verify these workers' identities to the companies and, once the North Koreans had secured jobs, received their company-issued laptops. Using login details supplied by their new employers, Chapman installed remote working software on the laptops, allowing the North Koreans to access them from outside the US. By early 2023, Chapman's TikTok videos showed a very different life. Work was picking up. @bestlifethrift/TikTok No longer was she crying and begging for handouts. Now living in a 2,000 sq. ft. home in Litchfield Park, Arizona, with four bedrooms and two bathrooms, Chapman posted videos of her chihuahuas playing in the backyard. She began posting about early starts, her work life and clients. 'I start at 5:30, go straight to my office which is the next door away from my bedroom. Then I start taking care of my clients. Computer business. It's now almost noon, and I'm just now getting to eat,' she says, biting into a piece of watermelon. A message exchange from November 2022 Chapman and 'AT,' a remote North Korean IT worker, offers a revealing look at her working day. At one point, Chapman was even asked to join a Microsoft Teams meeting between AT and their employer to help resolve technical issues. Chapman initially expressed concern about having to join the meeting, but was able to suggest an explanation AT could use. Chapman also shipped dozens of work laptops to Liaoning – a province of China that borders North Korea, according to the DOJ indictment. Images obtained and geolocated by CNN showed workers living relatively freely in Liaoning, as well as Laos, dining at restaurants, singing karaoke and chartering yachts. Photos published by the DOJ show what appears to be Chapman's office in 2023. Rows of labeled laptops sit on open shelves in a small room that federal investigators say she used to perpetrate a "staggering fraud on a multitude of industries." At one point, Chapman handled as many as 90 laptops for the DPRK IT workers, the DOJ said. Among the companies targeted was the shoe giant Nike, which unwittingly paid more than $75,000 to a North Korean employee and subsequently conducted a review to confirm there was no data breach. Computers and other electronic equipment inside the laptop farm at Chapman's home. United States District Court for the District of Columbia Chapman attached notes to identify the companies and identities associated with each device. United States District Court for the District of Columbia Of the 68 stolen identities that Chapman and her group of North Korea IT workers used, CNN was able to trace one identity with computer data provided by Palo Alto Network's Unit 42. "Breeyan Cornelius' was a stolen identity used by several North Korean IT workers, according to Gordenker, Consulting Director at Unit 42. He told CNN the real Cornelius was a bus driver living in California. CNN reached out to Cornelius but did not receive a response. The North Korean worker behind the fictitious 'Breeyan Cornelius' profile. Unit 42, Palo Alto Networks CNN reviewed computer data belonging to the North Koreans operating under the name 'Breeyan Cornelius' and found dozens of IT-related job applications and searches at American companies. In some cases, companies replied and even offered job interviews to the North Korean. In a fake resume, 'Breeyan Cornelius' claimed to be a 'Well-qualified Full Stack Developer familiar with wide range of programming utilities and languages.' The resume also claimed he graduated from The University of Tennessee at Chattanooga with a Bachelor of Science in Computer Science in 2014. Under work history, the profile also claimed previous employment at Bank of America and German pharmaceutical giant Bayer. 'We understand he operates in Liaoning,' Gordenker said, referring to the Chinese province that shares a lengthy border with North Korea. A few years into her new job, Chapman was enjoying the new income stream, travelling to Fukuoka and Tokyo to watch – and meet – a Japanese boyband. Videos from the trip show her marveling at the 'chic' lobby, touring her 'adorable' hotel room and gushing about all the new Japanese foods she'd been trying. Text messages from around the same time show her growing nervous about handling federal documents, according to the indictment. 'I can go to FEDERAL PRISON for falsifying federal documents,' she said in one message in August 2023, to a group that included several co-conspirator overseas IT workers. Shortly after, her life began to unravel. In late October 2023, the FBI executed a search warrant at her home in Litchfield Park. Photo of Chapman from the search warrant. Federal Bureau of Investigation Photo of Chapman's home from the search warrant. Federal Bureau of Investigation By March 2024, Chapman posted a TikTok video describing her struggles: 'I need help and I'm really bad at asking,' she said. 'I haven't worked since the end of October, and that's not by choice, I lost my job and I've gone through all of my savings.' She was arrested in May 2024, and legal proceedings began. By August, the toll was evident. She posted another plea on TikTok: 'I have been struggling quite a bit financially, and I did lose my house, I have to be out by tomorrow morning,' she said. 'If anyone is willing, five, 10 dollars.' Around this time, she began selling products on various websites, including artwork, books, custom poems, and 'credit fixing assistance.' In February 2025, Chapman ended her legal troubles by waiving her right to a jury trial and pleading guilty to conspiracy to commit wire fraud, aggravated identity theft, and conspiracy to launder monetary instruments. The DOJ said she claimed she wasn't aware she was working for the North Koreans, but Acting Assistant Attorney General of the Criminal Division Matthew Galeotti told CNN that that was 'irrelevant.' 'She knew that she was working for individuals abroad. She knew that they were using false identities. She knew that she was forging documents for her bank accounts. She knew that some of the addresses that she was sending hardware to were on the border of China and North Korea,' he said. 'The safety of our nation is at issue' In late June, the DOJ conducted sweeping raids and searches at 29 known or suspected laptop farms across 16 states, seizing around 200 laptops. With all North Korean workers located outside the US, in countries without extradition treaties with the US, these raids are one of the few tangible ways authorities can disrupt the scheme, Galeotti said. 'You will be prosecuted to the fullest extent of the law. The defendant in this case [Chapman] made perhaps just north of $170,000. It's not worth it,' he warned. Chapman arrived at her sentencing hearing at a US District Court in Washington DC on July 24 wearing dark glasses and accompanied by a camera crew. Inside the court, public defender Alexis Gardner argued for the lowest possible sentence. 'She's a pawn in this whole scheme,' Gardner told the court. Speaking through tears, Chapman told the court she began running the laptop farm because her mother was ill at the time. She expressed remorse for the harm she had caused people whose identities were stolen and used by the North Koreans. Christina Chapman cries outside a US District Court in Washington DC on the day of her sentencing. CNN 'The fact that I was part of something that caused so much damage to somebody,' Chapman said, sobbing. 'I really hate myself because of that.' Judge Randolph Moss acknowledged she seemed 'genuinely remorseful' but handed down a sentence of 102 months in prison and 36 months of supervised release. 'The safety of our nation is at issue,' he said. US authorities have vowed to track down other American citizens knowingly or unknowingly helping the Kim regime evade international sanctions, offering millions of dollars in rewards in exchange for information. US officials said it's not just money the North Koreans are after – they warn the scheme is evolving, and that as operatives gain access to sensitive roles or become exposed, they may turn malicious and launch malware or ransomware attacks. In a press briefing after Chapman's sentencing, US Attorney for the District of Columbia Jeanine Ferris Pirro sent a direct message to corporate America: 'This is a code red.' 'Your tech sectors are being infiltrated by North Korea. And when big companies are lax and they're not doing their due diligence, they are putting America's security at risk,' she said. Experts say the scheme is too big to take down, powered by a regime with no shortage of compliant workers, aided by US facilitators recorded in every state except Hawaii. 'For everyone that we do catch and for every laptop farm that the FBI raids, it is an element of whack-a-mole,' said Gordenker, noting that the alias Breeyan Cornelius is still active and was last seen applying for a job at a large insurance company in May 2025. 'There is no silver bullet,' Gordenker said. 'This is an inherent risk in doing business... you run the risk of hiring a North Korean.'