The U.S. Treasury Department has imposed sanctions on six individuals and two entities implicated in a North Korean-orchestrated IT worker fraud scheme. These operations, which frequently target the cryptocurrency sector, have been identified in North Korea, Vietnam, Laos, and Spain.
The sanctions target Amnokgang Technology Development Company, accused of managing overseas IT workers, and Nguyen Quang Viet, CEO of Vietnam-based Quangvietdnbg International Services Company Limited, for allegedly laundering $2.5 million in cryptocurrency for the network. Additional individuals sanctioned include Do Phi Khanh, Hoang Van Nguyen, Yun Song Guk, Hoang Minh Quang, and York Louis Celestino Herrera.
These measures freeze all U.S. assets linked to the sanctioned parties and prohibit any financial transactions or business dealings with the United States.
North Korean fraudulent tech workers have become a significant threat, extending their schemes globally and impacting various industries, including blockchain and fintech. Google reports indicate their infrastructure has spread worldwide.
The Treasury's action also included 21 cryptocurrency addresses across Ethereum and Tron. Chainalysis notes this multi-chain approach reflects North Korea's evolving strategy for moving funds and highlights the growing sophistication of these fraud rings, which exploit stolen identities and fabricated personas to gain employment with legitimate companies. These operations not only generate revenue but also pose risks of malware introduction and sensitive data extraction.