Washington: The U.S. Treasury Department has announced sanctions against a North Korean cyber actor accused of facilitating a scheme that uses overseas information technology workers to generate revenue for the North Korean regime.
According to Yonhap News Agency, the Treasury's Office of Foreign Assets Control has sanctioned Song Kum-hyok, labeling him as an actor affiliated with the Reconnaissance General Bureau hacking group Andariel. This group is part of North Korea's primary military intelligence agency.
The department revealed that Song played a role in a worker scheme where individuals, often North Korean nationals based in countries like China and Russia, were recruited and provided with fake identities and nationalities. This allowed them to secure employment at companies unaware of their true affiliations, generating revenue for North Korea. Additionally, some of these IT workers have introduced malware into company networks for further exploitation.
The sanctions also target one Russian national, two Russian entities, and two North Korean entities, all accused of participating in the IT worker scheme. Deputy Secretary of the Treasury Michael Faulkender emphasized the need for vigilance against North Korea's ongoing efforts to secretly fund its weapons of mass destruction and ballistic missile programs.
The Treasury Department highlighted its commitment to using all available tools to disrupt the Kim regime's efforts to bypass sanctions through digital asset theft, impersonation of Americans, and malicious cyber activities. The sanctions are part of the U.S. government's broader strategy to counter North Korea's attempts to achieve its strategic objectives through cyber espionage and revenue generation.