EXPLORINEER
en

Archive — US — techcrunch

US sanctions fraud network used by North Korean ‘remote IT workers’ to seek jobsand steal money

The U.S. Treasury sanctioned a North Korean fraud network exploiting fake job applications to infiltrate U.S. companies. This network has generated over $1 million for the regime, facilitating theft of sensitive data and extortion. Key operatives include Vitaliy Sergeyevich Andreyev and fraudulent companies like Chinyong and Shenyang Geumpungri, reinforcing efforts to counter North Korea's sanctioned activities aimed at funding its nuclear program.

Key points

  • The U.S. Treasury sanctioned an international fraud network tied to North Korea.
  • North Korean hackers pose as jobseekers to infiltrate U.S. companies.
  • Once employed, they steal data and extort companies for ransom.
  • This scheme generated over $1 million in profits for North Korea.
  • Key figures include Vitaliy Andreyev, accused of facilitating payments for North Korea.
  • Companies Chinyong and Shenyang Geumpungri employed fraudulent IT workers.
  • North Korea's thefts fund its internationally sanctioned nuclear weapons program.
  • Recent sanctions increase pressure on companies hiring North Koreans or sanctioned individuals.

Why it matters

  • The sanctions highlight ongoing tensions concerning North Korea's cybersecurity threats.
  • In 2025, cyber warfare and data theft are key global IT concerns, particularly from state actors.
  • Historically, North Korea has used cyber capabilities for financial gain; this trend continues to evolve.
  • Companies must adapt to increased scrutiny and responsibility over employee identities.

The U.S. sanctions aim to combat North Korean tactics that leverage job applications for cyber theft, reflecting a broader fight against sophisticated cybercrime tied to state-sponsored activities, especially as the global landscape of cybersecurity continues to evolve.