Japan, the United States, and South Korea warned that North Korean IT workers are continuing to earn overseas revenue for DPRK weapons programs while expanding malicious cyber activity. The statement says these workers hide their identities and locations with false personas, AI tools, and foreign facilitators to obtain freelance IT contracts in regions including North America, Europe, and East Asia. It highlights particular risk to blockchain companies, noting possible theft of intellectual property, data, and funds when organizations hire or outsource work to DPRK-linked personnel. The coordinated response combines updated Japanese guidance on new tradecraft, U.S. sanctions against facilitators and entities in Russia, Laos, and China, and South Korean advisories intended to help companies avoid being targeted or victimized.