US Widens Sanctions on North Korean Cyber Scheme

The U.S. Treasury Department has expanded sanctions to include North Korean cyber operative Song Kum Hyok, Russian national Gayk Asatryan, and several Russian and North Korean entities for orchestrating a scheme that places North Korean IT workers—often operating from China and Russia using stolen American identities—into remote jobs at U.S. and international companies. These workers, linked to the Andariel hacking group under North Korea's Reconnaissance General Bureau, have funneled hundreds of millions of dollars to North Korea's ballistic missile and WMD programs. Some have also introduced malware, contributed to cyberattacks, and stolen cryptocurrencies. The operation employs thousands of skilled IT workers and has facilitated significant cyber and financial operations for Pyongyang. The U.S. government highlighted the global threat posed by North Korea's ongoing espionage and digital asset theft campaigns. Authorities urge heightened vigilance, especially in the technology and cryptocurrency sectors.