home.treasury.gov US and South Korea Sanction DPRK Cyber Facilitators
Article Content
- •The U.S. and South Korea sanctioned nine individuals and two entities linked to DPRK.
- •Sanctions target revenue generation through illicit financing and overseas IT employment.
- •The actions are part of a broader strategy to disrupt DPRK's WMD funding.
On October 23, 2026, the U.S. Department of the Treasury, in coordination with South Korea, sanctioned nine individuals and two entities involved in facilitating financial transactions for North Korea (DPRK). These sanctions target actors generating revenue through illicit activities, including the employment of DPRK IT workers abroad. The actions aim to disrupt DPRK's access to international financial systems, which supports its weapons of mass destruction (WMD) programs. The sanctions come amid heightened tensions following three intercontinental ballistic missile (ICBM) launches by the DPRK this year. The designated individuals include those linked to the Lazarus Group, known for cyber attacks and illicit financing. This joint effort reflects ongoing commitments to counter DPRK's destabilizing activities and protect international security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Lazarus Group and Alis LLC in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who are the sanctioned individuals?
What is the purpose of these sanctions?
How does this affect international security?
Continue Reading
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…