Australia sanctions two North Korean individuals and two companies over North Korea's remote IT worker schemes (23 Oct 2026); iTnews reports the Australian Sanctions Office has warned that DPRK IT workers use stolen and doctored Australian drivers' licences and passports
According to iTnews (23 October 2026), Australia has imposed targeted financial sanctions and travel bans on two North Korean individuals, Yu Pu Ung and Sim Hyon Sop, and two companies, Korea Mangyongdae Computer Technology Company and Chinyong Information Technology Cooperation Company, which help the regime place IT workers in remote jobs abroad to bring in foreign currency. iTnews says all four were already under United States Treasury sanctions. iTnews reports that the Australian government said the workers obtained remote employment while posing as nationals of other countries, breaching UN Security Council resolutions that prohibit North Korea's export of labour, and that the listings act on findings by the Multilateral Sanctions Monitoring Team (MSMT), which the government said had exposed North Korea's sanctions-evasion networks and 'the serious cyber security risks those networks pose to affected businesses'. Foreign Minister Penny Wong said in a statement, as quoted by iTnews: 'We are taking this action in coordination with international partners, including the European Union.' According to iTnews, the listings follow a warning from the Australian Sanctions Office (ASO) that North Korean workers are using stolen and doctored Australian drivers' licences and passports to win remote contracts. iTnews reports the ASO said Australia's competitive salaries and demand for contract IT staff make the country an attractive target, that local companies have been approached through LinkedIn, Fiverr and Freelancer as well as through recruitment firms, and that businesses should not rely on recruiters' due diligence and should watch for warning signs such as AI-generated interview answers, face-swap filters on video calls and logins from several countries in quick succession. iTnews says making an asset available to a listed person or entity without ministerial authorisation is a criminal offence: individuals face up to 10 years' jail and fines of up to $910,000 or three times the value of the transactions, whichever is greater, and companies face fines of up to $3.64 million on the same basis, though a business can defend itself by showing it took reasonable precautions and exercised due diligence. Primary: iTnews. Correction (24 Oct 2026): this card previously credited the DFAT notice, the Foreign Minister's media release and the ASO advisory note directly; those pages could not be loaded to verify, so the card now credits iTnews and drops details iTnews does not report (the penalty-unit figures, the advisory note's publication dates and further red flags and advice). It also corrects the spelling of Mangyongdae. (source: iTnews)
- Product
- Australian employers and recruiters of remote IT contractors: sanctions and insider risk from North Korean (DPRK) IT workers
- Versions
- n/a — Australian sanctions listing (23 Oct 2026, per iTnews)
- Exploited in Australia?
- unknown
- Patch to
- Employers and recruiters hiring remote IT contractors: do not rely on recruiters' due diligence, and treat AI-generated interview answers, face-swap filters on video calls and logins from several countries in quick succession as warning signs (ASO advice as reported by iTnews).