US sanctions alleged North Korean IT sweatshop leader

The U.S. Treasury sanctioned Song Kum Hyok, alleged member of North Korea’s Andariel (APT45), and related Russian and DPRK-linked companies for involvement in ransomware attacks on U.S. hospitals, digital-asset theft, laundering, and a large-scale "fake IT worker" scheme that used stolen U.S. identities to place foreign workers in American companies and exfiltrate sensitive IP; the DOJ also disrupted multiple such scams affecting over 100 U.S. firms.