The **Treasury Department** announced a fresh wave of sanctions targeting Russian and North Korean nationals and entities. These actions are part of an ongoing effort to dismantle **Pyongyang**'s illicit IT worker campaign, which funnels millions in cryptocurrency back to the regime. ### Russian Nationals Accused of Crypto Laundering Among those sanctioned are Russian nationals **Ilya Aleksandrovich Boykov** and **Vitold Viktorovich Obertas**. They are accused of facilitating the laundering of millions in cryptocurrency payments earned by North Korean IT workers operating in Russia and deceptively working for U.S. companies. **Treasury Secretary Scott Bessent** emphasized that North Korea's government "continues targeting and exploiting American companies through fraudulent activities conducted by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments." **Obertas** is specifically implicated in laundering at least $3.5 million in cryptocurrency since January 2025 on behalf of **Amnokgang**, a North Korean shell company previously sanctioned by the U.S. in March. **Boykov** is also alleged to have laundered approximately $3.5 million in cryptocurrency since 2024, and to have provided logistical and financial support to **Alis**, another sanctioned North Korean company. ### Key North Korean Figures and Companies Targeted The sanctions also name several North Koreans, including **Kim Hyo Dong** and **Kim Ki Hyok**. **Hyok**, a senior **Alis** employee, is identified as the leader of a Russia-based delegation of North Korean IT workers, tasked with monitoring employees and ensuring they meet financial targets. He has reportedly transferred over $500,000 to North Korea since 2024. **Dong** is accused of leading another IT worker squad, providing logistical support, and transferring over $100,000 to evade sanctions. **First Financial and Technical Development Center**, a North Korean company, was also sanctioned for managing millions earned by North Korean operatives in Russia. This entity has allegedly assisted IT workers in using artificial intelligence to secure positions at U.S. companies and employed sophisticated money laundering techniques to conceal their earnings. Six IT workers – **Kim Kyong Ju**, **Ri Thae Chol**, **So Hyon Jin**, **Han Yu Song**, **Kim Sung Gwan**, and **Hyon Se Il** – were also sanctioned for collectively earning at least $750,000 on behalf of the company since 2025. ### Broader Scheme and International Response The **Office of Foreign Assets Control (OFAC)** has sanctioned dozens of North Korean officials and companies this year to disrupt this IT worker scheme. The illicit earnings are believed to fund Pyongyang's ballistic missile programs. The elaborate scheme involves North Korean nationals using stolen or purchased identities to gain high-paying IT roles in U.S. and European companies or government agencies. Beyond regular salaries, these workers monetize their positions through extortion, sensitive data theft, and facilitating multi-million dollar cryptocurrency thefts. Recently, the **Justice Department** disrupted numerous laptop farms in Texas and arrested two individuals connected to the scheme. Several Americans, including an active-duty **U.S. Army** member, have been convicted for aiding North Korean IT workers or hosting laptops that create the illusion of U.S.-based work. _The **FBI** has warned that North Korea is now targeting low-income Americans, offering freelance gigs like hosting laptops or acting as proxies for interviews. The agency noted that North Korean IT workers strategically seek out Americans facing financial stress._ Australia also recently sanctioned several North Korean nationals and companies involved in this pervasive IT worker and cybercrime network.