North Korean information technology (IT) workers are routing money earned through fraudulent overseas employment back to the regime through a centralized payment platform tied to sanctioned defense entities, according to a new analysis.

In a report published Tuesday, U.S. cybersecurity firm DTEX traced how wages earned by North Korean remote workers are reported, consolidated and funneled through an internal financial hierarchy before reaching entities linked to Pyongyang's sanctioned weapons programs.

The report expands on a trove of data first released by cryptocurrency investigator ZachXBT in April, which was exfiltrated from an internal North Korean