There are a couple of key areas, ones that I've alluded to already.
The whole North Korean evasive ability rests on being able to conceal that they're North Korean overseas, to varying degrees. In some places they have to do that less than others. The North Korean label, in other words, in some places doesn't attract as much scrutiny as it does, for example, in places like Europe. That's the starting point for North Korean evasion: don't make yourself look North Korean.
Having that strong network in China is a great starting point, primarily because with global trade flows at this moment, indeed so many foreign manufacturing sectors want to do business with China. They want to expand either their footprint in China or their business with China on a bilateral basis. That involves engaging with small and medium enterprises, in China potentially, which you may not know that much about. North Korea exploits that quite significantly.
It's the same patterns that you see overseas outside of China as well. North Korea uses foreign facilitators quite heavily. If you look at company registration documentation for a North Korean firm in Southeast Asia, you may not see a North Korean name on paper; you'll see Singaporean, Malaysian, or Vietnamese names, just as an example.
Similarly, in terms of banking, this same problem applies. Those foreign facilitators or companies that are opening accounts in the countries they're located in with fairly reputable banks, indeed banks of pretty much every shape and size, are able to do that often without financial institutions being aware of the fact that, in the process, they've exposed themselves to quite substantial risk.
North Korea has a very good head start in getting around the complicated sanctions regime that we've put in place. They've been working on their evasive ability for well over a decade now. We have a big game of catch-up to play in terms of our ability to detect how they're moving next.