We are sanctioning PRC-linked malicious cyber actors connected to the Treasury hack and Salt Typhoon malicious cyber activity. The United States strongly condemns all destabilizing behavior in cyberspace.
Treasury sanctions North Korea over remote IT worker schemes. The North Korean office responsible for the scheme, Department 53, was created to funnel money back into the country’s weapons programs. https://t.co/dYcsNzrEaz https://t.co/skTzuB3Z6m
#NorthKorea's cyber operations saw a dramatic surge in 2024, with hackers stealing $1.34 billion in 47 heists—double the previous year’s haul. The rise in #cybercrime raises serious concerns about funding the regime’s #military ambitions: @AVIRAL96 https://t.co/VKuEJxXQA7

In 2024, North Korea reportedly stole over $659 million in cryptocurrency through cyber heists, according to assessments from the United States, South Korea, and Japan. The country’s cyber operations have escalated significantly, with a total of $1.34 billion stolen across 47 separate incidents, doubling the previous year's total. In response to these rising threats, the U.S. and South Korea have increased sanctions and cooperation aimed at targeting key IT professionals and entities associated with North Korea's cyber activities. Recently, the U.S. Treasury sanctioned two individuals and four entities linked to North Korea's illicit IT worker network, which is believed to support the regime's weapons of mass destruction and missile programs. The North Korean office responsible for these schemes, known as Department 53, was established to redirect funds back into the country’s military ambitions.