Australia sanctions North Korea operatives in a new push against Pyongyang’s overseas money machine. Canberra said on Friday it had sanctioned two North Korean individuals and companies over the use of “fraudulent” IT workers and cybercrime to earn cash for the isolated nuclear-armed state.
The two men are alleged to be key operators in Pyongyang’s cybercriminal activities overseas, which analysts estimate bring in billions for the country’s weapons programme.
Australia sanctions North Korea: who was named and why
“The North Korean entities and individuals sanctioned today facilitate North Korea’s use of fraudulent IT workers to raise revenue for the regime’s nuclear weapons and ballistic missile programmes,” the office of Australia’s Foreign Minister Penny Wong said.
The two men, Yu Pu Ung and Sim Hyon Sop, have already been named by the United States government. In 2024, the US Treasury described the China-based Yu as a “linchpin” of North Korea’s illicit money-making activities and warned he was “skilled at employing various schemes to avoid detection”.
Sim is reportedly a top “shadow banker” for the regime. He is wanted by the FBI, with a $5 million reward for information leading to his arrest, for his role in helping transfer funds in and out of North Korea.
Australia said it acted in coordination with international partners, including the European Union.
How the IT worker scheme works
North Korea faces a slew of international sanctions over its weapons and nuclear programmes. It stands accused of seeking to skirt those sanctions by employing thousands of IT workers who impersonate nationals of other countries to obtain work and income on online platforms, then remit the money to government agencies.
Pyongyang has furiously denied those allegations, deriding them as efforts to “tarnish” its image.
The United States and allies warned in July that North Korean workers were using artificial intelligence tools to further obscure their true identities. Last month, New Zealand’s cybersecurity agency revealed a North Korean IT worker had used a fake identity to obtain remote work with a company in that country and then threatened to release sensitive information when exposed.
The scheme matters because it is quiet. Unlike missile tests, a remote worker with a stolen identity and a laptop draws no headlines, yet the income flows steadily into state coffers.
A wider crackdown on cybercrime revenue
The sanctions add to a growing international effort to choke off the digital revenue streams that fund weapons programmes. Cyber-enabled theft and fraud have become one of Pyongyang’s most reliable sources of foreign currency, according to analysts and Western officials.
Australia’s move also signals closer coordination among Western allies on the issue. Similar designations by Washington, and now Canberra working with the European Union, suggest the IT worker networks are being mapped and targeted as a system rather than as isolated cases.
The trend connects with broader cybersecurity concerns. Recent warnings about software vulnerabilities show how the same digital infrastructure that enables remote work can be exploited, whether by state-linked operators or ordinary criminals.
Canberra’s move also fits a wider pattern of pressure on illicit networks, from the Saudi-led coalition’s interceptions of Houthi drones and missiles and Houthi claims on Saudi defence sites to Pakistan’s own counterterrorism operations, as states try to cut off the money and weapons flows behind cross-border threats.
Frequently asked questions
Who did Australia sanction?
Two North Korean individuals, Yu Pu Ung and Sim Hyon Sop, along with companies linked to them, over fraudulent IT work and cybercrime that funds Pyongyang’s weapons programmes.
What is the fraudulent IT worker scheme?
North Korea is accused of sending thousands of IT workers abroad under false identities to earn income on online platforms, with the money remitted to government agencies in violation of UN sanctions.
Why does this matter?
Analysts estimate the cybercriminal operations bring in billions for North Korea’s nuclear weapons and ballistic missile programmes, making them a priority target for Western sanctions.
