The US Treasury’s Office of Foreign Assets Control sanctioned North Korean cyber actor Song Kum Hyok.

Song enabled strategies for IT workers to obtain jobs at firms by utilizing fictitious identities. Furthermore, OFAC sanctioned one person and four companies engaged in Russian scams. The DPRK’s military projects and financial operations are the targets of the actions.

Song Kum Hyok targeted for facilitating fraudulent employment schemes

Song Kum Hyok is a DPRK cyber actor who is associated with the sanctioned Andariel hacking group. The actor oversaw information technology employee cons that recruited DPRK nationals in Russia and China. Song provided the workers with false identities and nationalities to work for firms.

The program took advantage of innocent businesses to make money for the DPRK government by fraudulent means. DPRK IT personnel occasionally infected business networks with malware for later exploitation. The personnel actively concealed their names, locations, and nationalities by using pseudonyms and supporting documents.

In 2022 and 2023, Song used US persons’ information including names and social security numbers. The cyber actor created aliases for hired foreign workers using stolen personal data. Workers then used these accounts to pose as US persons seeking remote employment.

Song planned to split income generated from these fraudulent employment arrangements with the workers. The scheme targeted employers in wealthier countries through mainstream freelance contracting and payment platforms. Applications developed by DPRK IT workers spanned business, health, fitness, social networking, and entertainment sectors.

Song faces designation under Executive Order 13694 for receiving funds through cyber-enabled means. The designation targets commercial advantage and private financial gain from misappropriated information and resources.

Gayk Asatryan is a Russian citizen who contracts North Korean IT personnel through Russian-based businesses. Asatryan and Korea Songkwang Trading General Corporation inked a 10-year agreement in the middle of 2024. The agreement allows dispatch of up to 30 DPRK IT workers to Russia for Asatryan Limited Liability Company.

Russian network contracts North Korean IT workers directly

Asatryan also contracted with Korea Saenal Trading Corporation for additional worker deployment arrangements. According to the second deal, Fortuna Limited Liability Company would send 50 DPRK IT specialists to Russia. Both companies operate under Asatryan’s control to facilitate the worker placement schemes.

The sanctions action is part of the US government efforts to counter DPRK strategic interests through cyber espionage. Deputy Secretary Michael Faulkender highlighted the importance of remaining vigilant against DPRK financing of weapons programs. US Treasury is dedicated to stopping attempts by the Kim dictatorship to use digital asset theft as a means of evading sanctions.

OFAC designated Asatryan under Executive Order 13722 for attempting to export workers from North Korea. The designation targets revenue generation for the Government of North Korea and Workers’ Party. Asatryan LLC and Fortuna LLC face sanctions for being owned or controlled by Asatryan.

Korea Songkwang Trading General Corporation received designation under Executive Order 13810 as North Korean persons. Korea Saenal Trading Corporation also faces sanctions for engaging in commercial activity generating regime revenue. Both DPRK companies facilitate the overseas deployment of IT workers through contractual arrangements.

The network operates across multiple jurisdictions to obscure the true nature of employment relationships. Russian companies provide legal frameworks for DPRK worker deployment while maintaining plausible deniability. The arrangement allows North Korean workers to access international markets through Russian business entities.

These contracts formalize what previously operated as informal worker placement schemes across international borders. The structured approach indicates increased sophistication in DPRK revenue generation efforts through legitimate business channels.

Treasury targets revenue streams for weapons development programs

The Lazarus Group, Bluenoroff, and Andariel were previously sanctioned by OFAC on September 13, 2019. The DPRK state-sponsored cyber groups are under the Reconnaissance General Bureau planning virtual currency thefts. The groups had masterminded numerous high-value cryptocurrency heists to mitigate US and multilateral sanctions impacts.

تُعدّ هذه الخطوة العقابية جزءاً من جهود الحكومة الأمريكية لمصالح استراتيجية لكوريا الشمالية من خلال التجسس السيبراني. وقد سلّط نائب وزير الخزانة مايكل فولكيندر الضوء على أهمية البقاء يقظين ضد تمويل كوريا الشمالية لبرامج الأسلحة. تلتزم وزارة الخزانة الأمريكية بمنع محاولات نظام كيم الديكتاتوري استخدام سرقة الأصول الرقمية كوسيلة للتهرب من العقوبات.

The Technical Reconnaissance Bureau was sanctioned on May 23, 2023 for the development of offensive cyber capabilities. Its sub-unit cyber organization, the 110th Research Center, is also sanctioned for assisting DPRK activities. United Nations Security Council Resolution 2270 sanctioned the RGB in March 2016 for assistance in weapons development.

تم فرض عقوبات على المكتب الاستخباراتي التقني في 23 مايو 2023 بسبب تطوير قدرات سيبرانية هجومية. كما خضعت الوحدة الفرعية التابعة له، وهي المنظمة السيبرانية للمركز البحثي الحادي عشر، للعقوبات لمساعدتها في أنشطة كوريا الشمالية. وقد فرض مجلس الأمن التابع للأمم المتحدة القرار 2270 عقوبات على المكتب الاستخباراتي التقني في مارس 2016 بسبب مساعدته في تطوير الأسلحة.

يجب حظر جميع الممتلكات والمصالح الخاصة بالأشخاص المحظورين والمحتجزة في الولايات المتحدة. الكيانات التي يسيطر عليها 50% أو أكثر من الأفراد المدرجين على القائمة السوداء تُحظر أيضاً. يُطلب من المواطنين الأمريكيين قانوناً إبلاغ مكتب مراقبة الأصول الأجنبية (OFAC) بأي ممتلكات محظورة.

تحظر قواعد مكتب مراقبة الأصول الأجنبية (OFAC) على الأشخاص الأمريكيين المشاركة في أي معاملات مع الأشخاص المحظورين ما لم يتم ذلك بشكل صحيح ومصرح به. يمكن أن تكون مخالفات العقوبات من قبل الأشخاص الأمريكيين جنائية أو مدنية، سواء للأشخاص الأجانب أو المحليين. قد تواجه البنوك عقوبات بسبب المعاملات مع الأشخاص المدرجين على القائمة.

الهدف النهائي يركز على تحقيق تعديل سلوكي إيجابي بدلاً من العقاب. يتمتع مكتب مراقبة الأصول الأجنبية (OFAC) بالسلطة لإزالة الأفراد من قائمة المواطنين المصنفين خصيصاً (SDN List) عند الضرورة. تكمن مصداقية العقوبات في سلطة التعيين والإزالة ضمن الأطر القانونية القائمة.