Australia sanctions two North Korean individuals and two entities over North Korea's fraudulent remote IT worker networks (23 Oct 2026); the Australian Sanctions Office warns that DPRK IT workers have used stolen and doctored Australian drivers' licences and passports
On 23 October 2026 the Minister for Foreign Affairs designated two persons and two entities for targeted financial sanctions and declared two persons for travel bans under the Autonomous Sanctions Regulations 2011, according to a DFAT notice: YU Pu Ung, SIM Hyon Sop, Korea Mangyondae Computer Technology Company and Chinyong Information Technology Cooperation Company, now on DFAT's Consolidated List. In her media release the same day, Foreign Minister Penny Wong said the sanctioned entities and individuals facilitate North Korea's use of fraudulent IT workers to raise revenue for its nuclear weapons and ballistic missile programs, that these workers obtain remote employment while posing as nationals of other countries, and that the sanctions act on findings of the Multilateral Sanctions Monitoring Team about North Korea's sanctions-evasion networks and 'the serious cyber security risks those networks pose to affected businesses'; she said Australia is acting in coordination with international partners, including the European Union. DFAT's notice says that anyone who makes an asset available to, or for the benefit of, a designated person or entity without the Minister's authorisation commits an offence, as does anyone who uses or deals with a controlled asset. The Australian Sanctions Office's advisory note on DPRK IT workers (first published 26 August 2024, updated 31 July 2026) says Australia is an attractive target because of its competitive salaries and demand for contract IT professionals, that companies in Australia have been targeted through LinkedIn, Fiverr and Freelancer as well as formal recruitment companies, and that DPRK IT workers have been identified using stolen and doctored Australian identities, including drivers' licences and passports. Red flags it lists include possible AI-generated replies, including for interview responses; face-swap or other filters on video calls; multiple logins to one account from IP addresses in different countries in a short time; payment requests via PayPal, cryptocurrency or offshore accounts; and remote access to company systems instead of using a company-provided device. The ASO tells businesses not to rely on third-party due diligence by recruitment agencies. It says sanctions offences carry, for an individual, up to 10 years in prison and/or a fine of 2,500 penalty units ($910,000 as of 1 July 2026) or three times the value of the transactions, whichever is greater, and for a body corporate a fine of up to 10,000 penalty units ($3.64 million) or three times the transaction value, with a defence for a body corporate that took reasonable precautions and exercised due diligence. All four were already under United States Treasury sanctions, according to iTnews. Sources: DFAT notice and Foreign Minister media release (23 Oct 2026); ASO advisory note (updated 31 Jul 2026).
- Product
- Australian employers and recruiters of remote IT contractors: sanctions and insider risk from North Korean (DPRK) IT workers
- Versions
- n/a — sanctions listing under the Autonomous Sanctions Regulations 2011 (23 Oct 2026)
- Exploited in Australia?
- unknown
- Patch to
- Employers and recruiters hiring remote IT contractors: check the DFAT Consolidated List; verify identity documents directly with issuers and past employers, hold a live video or in-person interview, and treat VoIP-only numbers, face-swap filters, AI-written interview answers, logins from several countries and requests for crypto, PayPal or offshore payments as red flags (ASO advisory). Require remote staff to work on a company-issued device, block unapproved remote-administration tools and commercial VPNs, and limit access for workers who have not been physically verified. Report suspected DPRK IT workers to the Australian Sanctions Office (sanctions@dfat.gov.au).
Primary: DFAT — Two persons and two entities listed under the Autonomous Sanctions Regulations 2011 – Democratic People’s Republic of Korea (23 Oct 2026) · Vendor: Senator the Hon Penny Wong — Sanctions targeting North Korean fraudulent IT worker networks and cybercrime (23 Oct 2026) · iTnews — Australia sanctions North Korean IT worker bosses and financiers (23 Oct 2026) · Australian Sanctions Office — Advisory Note - Democratic People's Republic of Korea (DPRK) information technology (IT) workers (updated 31 Jul 2026)