North Korea’s IT worker scheme funds Russia’s war effort

DTEX reports that a North Korean IT worker payroll scheme is routing millions through front companies and sanctioned intermediaries — backed by leaked internal payment-server data tied to an administrator called “PC-1234” — to finance the regime’s weapons programs and support Russia’s military, with identified flows (nearly $2M during Dec 2025–Feb 2026 and $2.84M over three months) routed through sanctioned entities like Korea Ryonbong General Corp.