OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs

The report describes OFAC-sanctioned North Korean "IT worker" operations (Jasper/Coral Sleet) that place fabricated remote employees into foreign companies to steal data, extort victims, and launder proceeds to fund DPRK WMD programs. Operators use stolen identities and recruited collaborators, AI-generated personas and faceswaps, VPN services (e.g., Astrill) to mask origin, and sometimes malware or extortion to maximize access and revenue.