North Korea’s IT worker scheme is sending money through front companies, intermediaries, and sanctioned entities that help fund the regime’s broader priorities, including weapons production and support for Russia’s war effort in Ukraine. DTEX traced payments from an internal server to entities such as Korea Ryonbong General Corp, Sobaeksu, Saenal, and Songkwang, showing the money flows upward through a wider DPRK network. #KoreaRyonbongGeneralCorp #Sobaeksu #Saenal #Songkwang #PC1234
Keypoints
- DTEX found North Korea’s IT worker scheme funds a broader set of regime objectives, not just weapons development.
- Payments were traced through front companies, intermediaries, and sanctioned entities.
- Korea Ryonbong General Corp received $1.97 million from IT worker payments in a two-month period.
- Internal server data linked 390 IT worker accounts, chat logs, and transaction records to the money trail.
- The funds also appear to support Russia’s war effort alongside North Korea’s military programs.
Read More: https://cyberscoop.com/north-korea-it-worker-scheme-funds-russia-war-ukraine/