Treasury Freezes Assets of 10 North Koreans and Russians in IT Fraud Scheme
The government designated a Russia-based center and its operatives who have funneled millions from fake IT jobs into North Korean weapons programs.
By Sofia Molina ·
The U.S. Treasury Department froze the assets of ten individuals on Wednesday. These people are part of a North Korean operation that places fake IT workers in American and allied companies. The scheme is designed to steal money and access corporate data. The proceeds help fund North Korea's nuclear and missile programs.
The state-run enterprise operates by posing as legitimate tech professionals. These workers secure jobs at unsuspecting firms and send most of their salaries back to Pyongyang. Once inside a company network, they can steal sensitive information or install malware. The operation has generated hundreds of millions of dollars in recent years.
Investigators found that key parts of this network operate out of Russia. The Treasury's Office of Foreign Assets Control (OFAC) targeted specific intermediaries there. Vitold Viktorovich Obertas is a Russian national who facilitated financial transactions for North Korean officials. Since January 2025, he processed nearly $2 million in cryptocurrency conversions. He also handled at least $1.25 million in other currency transactions for the regime.
Kim Ki Hyok is a North Korean national leading an IT delegation in Russia. He monitors his team to ensure they meet financial quotas. Since 2024, he has transferred nearly $500,000 in cryptocurrency on behalf of the group. The Treasury designated him for his role in managing these funds.
OFAC also sanctioned the First Financial and Technical Development Center. This Russia-based organization is controlled by North Korea. It recruits trained IT workers for jobs in the U.S. and abroad. The center handles the cryptocurrency transfers that move the money. Six of its own operatives were designated alongside the organization.
The U.S. government has blocked all U.S.-linked property of these ten individuals. Americans and U.S. residents are generally prohibited from engaging with them. This action targets the financial infrastructure that converts fraudulent employment into revenue for North Korea's military projects.
Source: CBS News
