OFAC and South Korea’s MOFA sanctioned North Korean entities and individuals tied to hacking support and overseas IT-worker revenue schemes on May 23, 2023. The source says the Technical Reconnaissance Bureau and 110th Research Center support units such as Lazarus Group, and notes OFAC’s statement that the 110th Research Center was behind the 2013 DarkSeoul malware attack. It also describes Chinyong/Jinyong IT and Sang Man Kim as facilitators for North Korean IT workers abroad, with designated cryptocurrency addresses showing funds moving through personal wallets, mixers, DeFi protocols, mainstream exchanges, and Kim-controlled exchange deposit addresses.