The US Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned North Korean IT workers accused of theft and cyberattacks.
Details of the Sanctions
OFAC announced sanctions against North Korean national Song Kum Hyok, who allegedly used US citizens' information to create fake applications on behalf of foreign IT workers seeking employment with US companies. Russian national Gayk Asatryan was also sanctioned, accused of employing North Korean IT workers through long-term contracts with North Korean trading firms starting in 2024.
Targets and Tactics of North Korean IT Workers
North Korea aims to generate revenue for its ballistic missile programs by deploying thousands of highly skilled IT workers around the world, many located in China and Russia. OFAC noted that these workers target employers in wealthier countries using various job search platforms.
US Actions Against North Korean Operations
In 2023, US authorities have increasingly acted against fraudulent North Korean IT worker schemes. In June, four North Koreans were charged with wire fraud and money laundering after attempting to work remotely for blockchain companies in the US and Serbia. The DOJ also initiated a process to seize $7.74 million in frozen cryptocurrency allegedly earned by North Korean IT workers using fake identities.
The sanctions against North Korean IT workers highlight growing concerns among US authorities regarding cyber threats and attempts to circumvent international sanctions via digital assets.