DTEX Says North Korean IT Worker Payments Flow to Entities Supporting Russia’s War Effort
Summary
DTEX says data from 390 North Korean IT worker accounts shows payments flowing through front companies and sanctioned entities, including $1.97 million via Korea Ryonbong General Corp. The report says funds support regime programs and Russia’s war effort.
Key points
- DTEX investigator Michael Barnhart analyzed data from an internal North Korean payment server, including 390 IT worker accounts, chat logs and transaction records.
- DTEX mapped payments to entities including Sobaeksu, Saenal and Songkwang, as well as Korea Ryonbong General Corp., which the article identifies as a sanctioned defense entity.
- The report traces $1.97 million in IT worker payments through Korea Ryonbong General Corp. between December 2025 and February 2026.
- DTEX says proceeds from the scheme support a wider range of regime priorities, including weapons production and support for Russia’s war effort in Ukraine.
- Barnhart said the wallet attributed to administrator “PC-1234” remains active; more than $2.84 million in earlier activity was attributed to it and flowed to dozens of organizations.
Article Details
- Event Type
- Reported financial flows from North Korea’s IT worker scheme through front companies, intermediaries, and sanctioned entities
- Impact
- DTEX reported that internal payment-server data linked 390 IT worker accounts, chat logs, and transaction records to a broader money trail. It traced $1.97 million in payments between December 2025 and February 2026 through Korea Ryonbong General Corp. According to DTEX, revenue from the scheme supports North Korean regime priorities, including weapons programs, and appears to contribute to support for Russia’s war effort in Ukraine.
People
Countries
North KoreaNorth Korea’s IT worker scheme is sending money through front companies, intermediaries, and sanctioned entities that help fund the regime’s broader priorities, including weapons production and support for Russia’s warRussiaentities that help fund the regime’s broader priorities, including weapons production and support for Russia’s war effort in Ukraine.Ukrainethe regime’s broader priorities, including weapons production and support for Russia’s war effort in Ukraine.