OFAC sanctioned six individuals and two entities tied to a North Korean state-directed scheme that places fraudulent IT workers inside Western enterprises to generate revenue for DPRK weapons programs. The operation has materially scaled: actors now use AI-generated personas, deepfake identity documents, and jailbroken LLMs to bypass pre-hire screening and accelerate post-placement tradecraft. Any enterprise that hired remote IT contractors in the past 24 months faces significant exposure; the risk is active insider access, not a future hiring problem.