DPRK IT Worker Network — OFAC March 2026 Designations
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
Summary
On March 12, 2026, the U.S. Treasury's Office of Foreign Assets Control (OFAC) sanctioned two entities and six individuals — spanning the DPRK, Vietnam, Laos, China, and Spain — for facilitating North Korean information-technology (IT) worker fraud schemes that Treasury says generated nearly $800 million in 2024 to fund the DPRK's weapons of mass destruction and ballistic missile programs. The designated network used stolen identities, fabricated personas, and cryptocurrency conversion and laundering to place North Korean operatives in remote jobs at U.S. and international companies, in some cases followed by data theft and extortion. The action expands a long-running, multi-year OFAC/DOJ/FBI enforcement campaign against DPRK IT worker schemes and is corroborated by primary Treasury and State Department releases as well as blockchain-analytics reporting.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(5 events)
2021
Shenyang Geumpungri Network Technology Co., Ltd's delegation of DPRK IT workers reportedly began generating profits (later alleged to exceed $1 million) for Chinyong and Korea Sinjin Trading Corporation, according to a subsequent OFAC designation.
U.S. Department of the Treasury press release sb02302023
Yun Song Guk allegedly began leading a group of North Korean IT workers conducting freelance IT work from Boten, Laos.
U.S. Department of the Treasury press release sb04162024
DPRK IT worker schemes are alleged by Treasury to have generated nearly $800 million for the regime's weapons of mass destruction programs during this year.
U.S. Department of the Treasury press release sb041627 August 2025
OFAC sanctioned Vitaliy Sergeyevich Andreyev, Kim Ung Sun, Shenyang Geumpungri Network Technology Co., Ltd, and Korea Sinjin Trading Corporation under Executive Order 13687 for roles in a related DPRK IT worker fraud network.
U.S. Department of the Treasury press release sb023012 March 2026
OFAC designated Amnokgang Technology Development Company, Quangvietdnbg International Services Company Limited, and six individuals (Nguyen Quang Viet, Do Phi Khanh, Hoang Van Nguyen, Yun Song Guk, Hoang Minh Quang, York Louis Celestino Herrera) for facilitating DPRK IT worker fraud schemes; OFAC also amended the existing designation of Sim Hyon-Sop with additional cryptocurrency addresses.
U.S. Department of the Treasury press release sb0416 / NK Newsmodel: claude-code-investigator
generated: 9/23/2026, 11:13:55 PM
last updated: 9/24/2026, 3:21:29 AM
avoid.net — verified advice for a post-truth world