The U.S. government is aware of this but for as long as their US companies are never directly selling to NK the sanction is enforced from the US's perspective. This including banks cannot do transaction (via multiple middlemen? yes sure! Money laundering, but the FBI will be looking at it).
Please elaborate! If you're comfortable with it of course.
Here is their distribution center: https://www.curvature.com/DistributionCenter
Carrying inventory valued at $200mm.
After I terminated my employment at Cisco Systems, some of my departmental coworkers started a consulting business to provide services related to the products that we used to work on, including maintenance services that duplicate and compete with professional services offered by Cisco itself.
I'm also earning a living as a thirdparty support provider, but not for Cisco products. All of my customers have been denied support by the original vendors for economic reasons (can't afford it) or corporate decisions to discontinue support. In addition to my own experience operating and reverse engineering the products I support, I have benefited from corporate leaks of documents and binaries as well as being passed material from paying customers.
I even generate licenses on my own for products that aren't sold anymore, without permission of the original vendors, but they know about it and haven't requested that I stop.
Therefore, I am certain that anyone subject to a government embargo would be able to procure these services from a third party or hire a local hacker to take care of these things.
I'll assume #1 isn't true since it would be stupid for those companies to do that for so little money.
#2 has interesting implications about trade embargoes. Unless everyone in the world participates, it seems like all an embargo does is add complexity and middle-men to the transaction. For example, if they legally acquired the software and hardware through a Chinese or Russian reseller, then all that happened was the Chinese or Russians took a cut.
#3 interestes me because what happens there? Ok, they are using clearly stolen software, now what? Are there any consequences?