The Justice Department announced guilty pleas and forfeiture actions targeting DPRK revenue-generation schemes involving remote IT worker fraud and APT38 virtual currency theft. Facilitators in the United States and Ukraine allegedly helped overseas North Korean IT workers obtain jobs at more than 136 U.S. companies by using false or stolen identities, hosting company laptops in U.S. residences, and installing unauthorized remote access software. The fraudulent employment activity generated more than $2.2 million for the DPRK regime and compromised more than 18 U.S. identities, while separate APT38 operations stole funds from four overseas virtual currency platforms in 2023. U.S. authorities froze and sought forfeiture of more than $15 million in virtual currency, highlighting how DPRK actors combine workforce fraud, identity misuse, remote-access infrastructure, and crypto theft to evade sanctions and fund state priorities.