Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesOn August 27, 2025, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) designated four people and entities it said supported a North Korean IT worker network: Russian national Vitaliy Sergeyevich Andreyev, Russia-based North Korean official Kim Ung Sun, Chinese company Shenyang Geumpungri Network Technology Co., Ltd., and Korea Sinjin Trading Corporation. Treasury said the network generated revenue for North Korea and that Andreyev and Kim helped move nearly $600,000. Those allegations and figures are Treasury’s account, not independently audited findings.
Who OFAC designated and what roles Treasury attributed to them
Treasury described the four designations as targeting a network connected to Chinyong Information Technology Cooperation Company, which it associated with North Korea’s defense ministry and said employed delegations of IT workers in Russia and Laos. The parties’ alleged roles differed:
| Designated party | Treasury’s description of the role |
|---|---|
| Vitaliy Sergeyevich Andreyev | A Russian national who facilitated payments to Chinyong. |
| Kim Ung Sun | A North Korean economic and trade consular official based in Russia who worked with Andreyev on transfers. |
| Shenyang Geumpungri Network Technology Co., Ltd. | A Chinese front company for Chinyong that Treasury said consisted of a delegation of North Korean IT workers. |
| Korea Sinjin Trading Corporation | A North Korean trading company Treasury said was subordinate to the Ministry of People’s Armed Forces General Political Bureau and received government directives about Chinyong’s internationally deployed workers. |
Treasury said the Shenyang Geumpungri delegation had earned more than $1 million in profits for Chinyong and Sinjin since 2021. That amount is Treasury’s stated figure; the announcement does not establish it as an independently audited total. Treasury’s August 27, 2025 announcement sets out the agency’s account of the network.
What Treasury said about the money transfers
Treasury said that, since at least December 2024, Andreyev worked with Kim to facilitate multiple transfers worth nearly $600,000. According to Treasury, they converted cryptocurrency into U.S. dollar cash. The amount and description are allegations in Treasury’s announcement, not a court finding or independently verified total.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
Treasury’s 2026 National Proliferation Financing Risk Assessment later repeated the nearly $600,000 transfer figure and the more-than-$1-million profit figure while describing North Korean IT worker revenue-generation methods. The later report adds government context but is not an independent adjudication of the specific allegations. Read the 2026 assessment.
Why OFAC designated the parties
Treasury said OFAC designated Andreyev under Executive Order 13687 for materially assisting or supporting Chinyong. Kim was designated under the same order for acting or purporting to act for the North Korean government. Shenyang Geumpungri was designated for being owned or controlled by, or acting for, Chinyong; Sinjin was designated for being owned or controlled by, or acting for, the North Korean government.
What the sanctions mean for U.S. persons and property
Under Treasury’s notice, property and interests in property of designated persons that are in the United States, or in the possession or control of U.S. persons, are blocked and must be reported to OFAC. An entity owned 50 percent or more, directly or indirectly and individually or in the aggregate, by blocked persons is also blocked, even if it is not separately named on the sanctions list.
Transactions by U.S. persons, or transactions within or transiting the United States, that involve blocked persons’ property are generally prohibited unless authorized or exempt. This is a general description of the notice, not guidance for deciding whether a particular payment, customer, or business relationship is permissible. Anyone handling a specific transaction should consult current OFAC records and applicable guidance.
Rank #3
How Treasury connects the case to employer and network risks
Treasury says North Korean IT workers may use fraudulent documents, stolen identities, and false personas to obtain work at legitimate companies. It also says some have introduced malware to steal proprietary or sensitive information. These are Treasury’s broader warnings about the threat; they should not be read as proof that every worker or company in this case engaged in every described practice.
Treasury’s announcement quotes Under Secretary for Terrorism and Financial Intelligence John K. Hurley describing the threat: “The North Korean regime continues to target American businesses through fraud schemes involving its overseas IT workers, who steal data and demand ransom,” said Under Secretary of the Treasury for Terrorism and Financial Intelligence John K. Hurley. Treasury points employers to FBI guidance on protecting networks from North Korean IT worker schemes.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
