U.S. Targets North Korean IT Worker Scheme With New Sanctions
WHO:
Fox Business - The Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned 10 individuals and one entity accused of helping operate or finance North Korean IT-worker schemes.
Fox Business - Treasury Secretary Scott Bessent said the North Korean regime targets American companies through fraudulent activities by overseas IT operatives.
Fox Business - Russian national Vitold Viktorovich Obertas allegedly acted as an intermediary for North Korean officials.
Fox Business - Russian national Ilya Aleksandrovich Boykov allegedly facilitated transactions supporting a previously sanctioned North Korean entity.
Fox Business - The First Financial and Technical Development Center is described by Treasury as a North Korean-controlled entity located in Russia.
CBS News Politics - The Treasury Department is targeting a North Korean operation that allegedly supplies stolen identities, fake résumés, and fake IT employees to infiltrate legitimate U.S. businesses.
Cointelegraph - Chainalysis analyzed North Korean crypto cash-outs connected to an operation accused of helping fund weapons programs.
WHAT:
Bitcoinist - Treasury also designated eight cryptocurrency addresses on Ethereum and Tron.
Fox Business - The Trump administration imposed sanctions targeting a North Korean government-run scheme that allegedly places IT workers in legitimate companies and funnels earnings to Pyongyang’s weapons of mass destruction and ballistic missile programs.
Fox Business - Treasury said the workers’ wages generated hundreds of millions of dollars, most of which the regime allegedly collected.
Fox Business - Treasury said workers also deployed malware, stole sensitive and proprietary information, and extorted companies.
Fox Business - The sanctions block designated individuals’ and the entity’s property and interests in property in the United States or held or controlled by U.S. persons; U.S. persons are generally prohibited from transacting with them unless OFAC authorizes it.
Cointelegraph - The U.S. sanctions targeted 10 people and one entity accused of helping North Korean IT-worker schemes fund weapons programs.
WHERE:
Fox Business - The alleged scheme placed workers in U.S. and allied-country companies; the sanctioned First Financial and Technical Development Center is located in Russia.
CBS News Politics - The operation allegedly infiltrated legitimate U.S. businesses.
WHEN:
Fox Business - Treasury previously imposed separate sanctions against another North Korean IT-worker network in March.
WHY:
Fox Business - Treasury said the schemes generated funds for North Korea’s weapons programs and exposed businesses worldwide to risks, including extortion and theft of sensitive data.
HOW:
Fox Business - Workers allegedly used stolen identities, fraudulent documents, concealed nationalities, and fake personas to obtain technology jobs.
Fox Business - The networks allegedly used cryptocurrency, money-laundering techniques, and artificial-intelligence tools to generate and transfer funds.
Fox Business - Obertas allegedly handled nearly $2 million in cryptocurrency conversions and at least $1.25 million in other-currency transactions for North Korean officials.
Fox Business - Boykov allegedly facilitated cryptocurrency transactions worth the equivalent of $3.5 million for a previously sanctioned North Korean entity.
Fox Business - Treasury said the First Financial and Technical Development Center deployed trained North Korean IT workers who allegedly used “Super Intelligence (SI) tools” and complex cryptocurrency transfers.
(UPDATED October 29, 2026 18:00 UTC)
The Treasury Department has sanctioned 10 individuals and one entity accused of helping North Korea place IT workers in legitimate U.S. and allied-country companies and funnel their earnings to weapons programs. Treasury says workers used stolen identities and fake résumés, and in some cases stole sensitive information, deployed malware, or extorted businesses; the agency also designated eight cryptocurrency addresses on Ethereum and Tron. The sanctions block the targets’ U.S.-linked property and generally bar U.S. persons from conducting transactions with them, while Treasury alleges that Russian nationals Vitold Obertas and Ilya Boykov helped move millions of dollars in cryptocurrency and other funds.
--
(UPDATED October 29, 2026 14:07 UTC)
The Trump administration has sanctioned 10 people and one Russia-based entity accused of helping North Korea place IT workers in legitimate U.S. and allied companies and channel earnings to its weapons programs. Treasury says the workers used stolen identities, fake résumés and concealed nationalities, while also stealing sensitive information, deploying malware and extorting businesses; the operation allegedly generated hundreds of millions of dollars for Pyongyang. Two Russian nationals are accused of facilitating money transfers, including cryptocurrency transactions, and the sanctions block their U.S.-held assets and generally bar U.S. persons from doing business with them.