U.S. Treasury Sanctions North Korean IT Worker Network Funding Weapons Programs

According to OFAC, the U.S. Treasury’s Office of Foreign Assets Control, sanctions have been imposed on a network described as a DPRK IT worker ecosystem linked to a DPRK trading firm, a Chinese shell company and key facilitators who allegedly enable the regime’s revenue generation.

The designation targets Vitaliy Sergeyevich Andreyev, Kim Ung Sun, and Shenyang Geumpungri Network Technology Co., Ltd., with Korea Sinjin Trading Corporation also named for its role in the scheme that exploits overseas IT labour to fund the DPRK’s prohibited weapons and ballistic missile programmes. The network is said to generate revenue through data theft and ransomware-style extortion, using falsified identities and fabricated personas to infiltrate legitimate enterprises in the U.S. and allied nations.

Since December 2024, Andreyev has helped move cryptocurrency into cash equivalents, and the front company Shenyang Geumpungri Network Technology Co., Ltd. has generated over $1 million in profits since 2021, benefiting Chinyong Information Technology Cooperation Company and Korea Sinjin Trading Corporation.

The actions extend to blocking U.S.-based property and interests of the designated parties, with penalties for sanctions violations and potential secondary sanctions for financial institutions that interact with them.