Find notable cyber news and cases, enriched with sources, timelines, and signals.

Japan-South Korea-U.S. joint forum and advisories on North Korean IT worker fraud

Public Sector Action
First reported
Last updated
Happening score
H score 20
1 unique sources, 1 articles

Summary

Hide ▲

Japan, South Korea, and the United States held a joint forum on Aug. 26 in Tokyo and issued updated advisories to tighten collaboration against North Korean IT worker fraud, broadening official countermeasures against a scheme that can drive espionage, IP theft, and financial loss. The coordinated response reflects rising concern about operatives using fake identities and remote-work tradecraft to embed inside companies and organizations. Governments also urged stronger identity verification and anti-fraud controls across affected organizations and freelance-platform ecosystems.

Related Happenings

US Scam Center Strike Force indictments and domain seizures against scam centers

Law Enforcement
First: 24.04.2026 19:48 Last: 24.04.2026 19:48 Sources 1

About this happening: US authorities **indicted** two people and **seized** scam infrastructure in a **financial-fraud** case targeting Southeast Asian scam centers, disrupting operations used to scam...

North Korean remote IT worker scam operation targeting American companies

Campaign
First: 16.04.2026 19:00 Last: 16.04.2026 19:00 Sources 1

How related: Japan, South Korea, and the United States are cooperating to fight against the growing threat of North Korean operatives posing as IT workers to embed themselves in companies and organizations throughout Asia and globally.

About this happening: A long-running **North Korean remote IT worker scam operation** used **stolen identities** and fake placements to embed operators inside **more than 100 American companies**. The...

OFAC sanctions DPRK IT worker scheme network

Regulatory/Legal Action
First: 18.03.2026 19:26 Last: 18.03.2026 19:26 Sources 1

About this happening: **OFAC** sanctioned **Ryujong Credit Bank**, **KMCTC**, and **eight individuals** tied to **North Korean cryptocurrency laundering** and **fraudulent IT worker schemes**. The **U....

DOJ guilty pleas in North Korea IT worker fraud case

Law Enforcement
First: 15.11.2025 12:21 Last: 15.11.2025 12:21 Sources 1

About this happening: **Five individuals** pleaded guilty in a **U.S. federal case** tied to **North Korea's IT worker fraud** scheme, increasing criminal exposure for a cross-border operation that use...

Scam Center Strike Force Established a new task force to disrupt scam networks trace illicit funds seize cryptocurrency and coordinate with international partners. for Announced

Public Sector Action
First: 14.11.2025 16:54 Last: 14.11.2025 16:54 Sources 1

About this happening: U.S. federal authorities launched **Scam Center Strike Force** to disrupt **Chinese cryptocurrency scam networks**, an anti-fraud push aimed at protecting Americans from **nearly...

Timeline

  1. 04.09.2025 04:00 2 articles · 8mo ago

    Japan, South Korea, and the United States hold Tokyo forum against North Korean IT worker fraud

    Industry Or Public Sector Update

    Japan, South Korea, and the United States held a joint forum in Tokyo on Aug. 26, 2025 to improve collaboration against North Korean operatives posing as IT workers, and Japan and South Korea issued updated advisories urging companies to verify identities and strengthen anti-fraud efforts. The forum also brought together government officials and private-sector experts, including Google Cloud's Mandiant, to look for additional strategies to counter the threat.

    Show sources
  2. 04.09.2025 04:00 1 articles · 8mo ago

    US Treasury sanctions four entities tied to the North Korean IT worker scheme

    Legal Policy Action Update

    On Aug. 27, 2025, the US Treasury Department sanctioned Vitaliy Sergeyevich Andreyev, Kim Ung Sun, Shenyang Geumpungri Network Technology, and Korea Sinjin Trading Corp for roles in the North Korean IT worker scheme, saying the four fronts helped facilitate at least $1.6 million to the DPRK. The sanctions added pressure on the fraud network that uses fake IT worker identities, front companies, and remote-access tradecraft to support regime revenue generation.

    Show sources