North Korean IT workers have been impersonating software and technology firms with a series of fraudulent websites linked to China-based front companies facilitating sanctions evasion, according to a U.S. cybersecurity firm.

By posing as legitimate U.S.-based firms, North Korean actors sought access to sensitive contracts and evade sanctions in pursuit of state goals including weapons development, SentinelLabs said in a report published on Thursday.

“The DPRK’s use of the IT worker scheme underscores the regime’s adaptability in exploiting global markets to further its financial objectives,” SentinelLabs said, adding that the