OFAC sanctions DPRK IT worker fraud network and cash-out facilitators

The U.S. Treasury Department’s Office of Foreign Assets Control sanctioned 10 individuals and one entity on Oct. 28, 2026, targeting a North Korean IT worker network that Treasury said generated revenue for the regime’s weapons programs by posing as legitimate remote workers and moving proceeds through cryptocurrency channels, according to Treasury and Chainalysis. Chainalysis said the latest action targets Russian nationals Ilya Aleksandrovich Boykov and Vitold Viktorovich Obertas, along with DPRK nationals Kim Ki Hyok and Kim Hyo Dong, for roles in a broader scheme that placed North Korean IT workers at U.S.