US Sanctions North Korean Cyber Actor and Russian Facilitators in Dual Crackdown
The US Treasury's OFAC has imposed sanctions on Song Kum Hyok, a North Korean operative linked to the Andariel hacking group, for orchestrating an illicit IT worker scheme. The operation allegedly generated revenue for Pyongyang's weapons programs through falsified identities and remote employment fraud.
Russian national Gayk Asatryan and four entities were also targeted for facilitating a pipeline of North Korean IT workers to Russia. The Treasury claims these networks exploited stolen identities to infiltrate global companies, with some workers deploying malware for further exploitation.