Australia Sanctions North Korean Cyber Actors, Tightens Oversight of Digital Assets

Australia has imposed new sanctions on one individual and four entities linked to North Korea’s cyber operations, citing their involvement in financing the country’s weapons of mass destruction (WMD) programme.

Foreign Minister Penny Wong said the sanctions target those responsible for “malicious cyber-enabled activities” that generate revenue for Pyongyang’s missile and nuclear development. The designations, made under the Autonomous Sanctions Regulations 2011, apply to Park Jin Hyok, Kimsuky, Lazarus Group, Andariel, and Chosun Expo.

The measures include asset freezes within Australia and travel bans for those listed. Wong said the move reflects Australia’s commitment to countering state-sponsored cybercrime and enforcing United Nations Security Council resolutions against North Korea.

The Department of Foreign Affairs and Trade (DFAT) stated that the sanctioned entities are part of a broader cybercrime network used by Pyongyang to steal cryptocurrency, run online scams, and conduct illicit IT work—activities estimated to have generated billions of dollars for its weapons programme.

The government also issued a public warning, urging Australians to remain alert to cyber threats and avoid transactions with listed entities. Authorities warned that any payments to sanctioned parties could trigger law enforcement action.

Government data show that North Korean hackers stole at least US$1.9 billion in cryptocurrency globally in 2024, laundering the proceeds through foreign intermediaries to fund munitions materials such as copper. Wong said the measures aim to “disrupt these financial pipelines” and reinforce accountability for cyberattacks. DFAT added that unauthorised dealings with sanctioned parties could result in legal penalties.

Separately, Australia’s regulators are tightening oversight of digital assets and crypto access points. The Australian Securities and Investments Commission (ASIC) has updated its Information Sheet 225, broadening the definition of “crypto-assets” to “digital assets” and adding new examples covering staking, yield-bearing tokens, DeFi protocols, and stablecoins.

Meanwhile, parliament is considering legislation to regulate crypto ATMs under AUSTRAC supervision. The proposed rules would require operators to register, verify user identities, report transactions, and implement real-time monitoring systems as part of wider anti-money-laundering measures.

Together, the moves underscore Australia’s dual efforts to curb illicit finance and enhance transparency across the digital asset ecosystem.