Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOn March 12, 2026, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) designated six individuals and two entities it says supported North Korean government-orchestrated IT-worker schemes. Treasury alleges the schemes use false identities to secure work with legitimate companies, move earnings to North Korea, and in some cases steal data or extort employers. The designations block covered property and impose transaction restrictions for U.S. persons, subject to applicable exemptions and licenses.
What the March 12 sanctions announcement says
Treasury says the network helped North Korean IT workers obtain jobs by concealing their identities and generated funds for North Korea’s weapons programs. The named facilitators were based in North Korea, Vietnam, Laos, and Spain; Treasury describes different roles rather than a single uniform operation.
As an Amazon Associate I earn from qualifying purchases.
- Amnokgang Technology Development Company managed overseas IT-worker delegations, according to Treasury.
- Nguyen Quang Viet, described by Treasury as the CEO of a Vietnam-based company, facilitated currency conversion.
- Yun Song Guk led a group of freelance IT workers operating from Boten, Laos.
- Other designees, Treasury says, supplied banking, currency, or contract support.
Treasury says Nguyen converted approximately $2.5 million into cryptocurrency for North Koreans between mid-2023 and mid-2025, including illicit earnings associated with Amnokgang. It says Yun coordinated several dozen transactions totaling more than $70,000 related to IT services and worked with a facilitator to develop freelance IT contracts. These are Treasury’s descriptions in its sanctions announcement, not independently audited totals.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Treasury also reported that DPRK IT-worker schemes generated nearly $800 million in 2024 and said the revenue supports weapons of mass destruction programs. The figure is attributed to Treasury; the announcement does not establish it as an independently verified or audited total. Secretary of the Treasury Scott Bessent said: “The North Korean regime targets American companies through deceptive schemes carried out by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments.” Treasury’s March 12, 2026 announcement.
#1 Best Overall
How the alleged scheme works—and the risks for employers
Treasury says teams use fraudulent documents, stolen identities, and fabricated personas to hide who they are and get hired by legitimate businesses, including U.S. companies. The DPRK government reportedly takes most of the workers’ wages. Treasury says some workers have also covertly introduced malware into company networks to obtain proprietary or sensitive information.
A January 23, 2025 FBI alert describes additional employer risks: workers may copy code repositories to personal accounts, seek credentials or session cookies, and threaten to release or ransom stolen data or code. The FBI recommends watching for suspicious network access and data movement.
Rank #2
What the sanctions mean for U.S. persons
Under Treasury’s announcement, property and interests in property of designated persons that are in the United States or in the possession or control of U.S. persons are blocked and must be reported to OFAC. An entity is also blocked if one or more blocked persons own 50 percent or more of it, individually or in the aggregate.
Transactions by U.S. persons, or within or transiting the United States, involving blocked property are generally prohibited unless authorized by an OFAC general or specific license or exempt. Treasury warns that violations can lead to civil or criminal penalties. The details depend on the circumstances, so consult OFAC’s current North Korea sanctions page, relevant regulations, licenses, and sanctions lists for current requirements rather than relying on a news summary.
Rank #3
Practical checks employers can use
Official guidance combines hiring controls with limits on what a new or remote worker can access. Warning signs warrant verification and review; none alone proves that an applicant is a North Korean worker.
Verify identity and employment history
The May 16, 2022 joint State Department, Treasury, and FBI advisory recommends verifying employment and education directly using contact details obtained independently, checking identity by video, and conducting background checks. Check whether names, locations, work histories, contact details, or payment instructions conflict or change unexpectedly. Reused phone numbers or email addresses, repeated résumé details, and logins from different countries can merit further review.
The FBI also advises identity verification during interviewing, onboarding, and ongoing employment; training HR and technical teams; and auditing staffing firms. Report suspected activity to the FBI’s Internet Crime Complaint Center (IC3).
Recommended Free Tools
Limit access and monitor activity
- Apply least privilege; restrict local administrator access and the ability to install remote-desktop software.
- Monitor unusual network traffic and remote connections, and review logs and browser sessions for signs of data leaving the organization.
- Check endpoints for suspicious software and watch for unexpected copying of code, credentials, or other sensitive material.
- Be cautious with remote collaboration tools on employer-provided computers. The interagency advisory also recommends avoiding cryptocurrency payments to workers.
These safeguards address different risks: identity and history checks help validate who is being hired, while least privilege and monitoring reduce the potential impact of compromised or misused access.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How this action differs from the 2025 sanctions
The March 2026 designations are distinct from Treasury’s August 27, 2025 action involving Vitaliy Andreyev, Kim Ung Sun, Shenyang Geumpungri Network Technology, and Korea Sinjin Trading Corporation. In that earlier announcement, Treasury said the network facilitated cryptocurrency-to-cash transfers and that a delegation associated with the Chinese front company had earned over $1 million in profits for Chinyong and Korea Sinjin Trading Corporation since 2021. Those names and figures belong to the earlier action, not the March 2026 designation list. Treasury’s August 27, 2025 announcement.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
