Find notable cyber news and cases, enriched with sources, timelines, and signals.

Treasury sanctions DPRK financial network over cybercrime and IT worker fraud

Public Sector Action
First reported
Last updated
Happening score
H score 28
1 unique sources, 1 articles

Summary

Hide ▲

The U.S. Treasury Department imposed sanctions on eight individuals and two entities tied to North Korea's global financial network, escalating pressure on the funding channels that support cybercrime and IT worker fraud. The action targets money laundering linked to $5.3 million in cryptocurrency and other sanctions-evasion activity. Treasury also said Pyongyang-linked actors have stolen over $3 billion in the past three years.

Related Happenings

Treasury sanctions Prince Group-linked entities and FinCEN designates H-Pay Service

Regulatory/Legal Action
H score17 First: 24.06.2026 11:55 Last: 24.06.2026 11:55 Sources 1

About this happening: The U.S. Treasury imposed fresh sanctions on nine individuals and 26 entities linked to Prince Group, while FinCEN designated H-Pay Service PLC as a prim...

U.S. Treasury sanctions Kok An scam network

Regulatory/Legal Action
H score40 First: 04.05.2026 08:59 Last: 04.05.2026 08:59 Sources 1

About this happening: The U.S. Treasury Department sanctioned Cambodian Senator Kok An and affiliates tied to cyber scam compounds, escalating financial and legal pressure on a network accu...

North Korean remote IT worker scam operation targeting American companies

Campaign
H score41 First: 16.04.2026 19:00 Last: 16.04.2026 19:00 Sources 1

About this happening: A long-running North Korean remote IT worker scam operation used stolen identities and fake placements to embed operators inside more than 100 American companies. The...

OFAC sanctions DPRK IT worker scheme network

Regulatory/Legal Action
H score32 First: 18.03.2026 19:26 Last: 18.03.2026 19:26 Sources 1

About this happening: OFAC sanctioned Ryujong Credit Bank, KMCTC, and eight individuals tied to North Korean cryptocurrency laundering and fraudulent IT worker schemes. The U....

Operation Sentinel cybercrime arrests and takedowns

Law Enforcement
H score75 First: 23.12.2025 11:30 Last: 23.12.2025 11:30 Sources 1

About this happening: Interpol coordinated Operation Sentinel, leading African law enforcers to arrest 574 suspects in a continent-wide cybercrime sweep that disrupted BEC, digital ex...

Timeline

  1. 05.11.2025 12:55 2 articles · 8mo ago

    U.S. Treasury sanctions North Korea's global financial network over cybercrime and IT worker fraud

    Legal Policy Action Update

    The U.S. Treasury Department imposed sanctions on eight individuals and two entities in North Korea's global financial network for laundering money tied to cybercrime and information technology (IT) worker fraud. Treasury said the action is meant to cut off revenue streams used to fund Pyongyang's weapons development and cyber operations.

    Show sources
  2. 05.11.2025 12:55 1 articles · 8mo ago

    First Credit Bank wallets and KMCTC support North Korea's IT worker fraud network

    Campaign Scope Update

    TRM Labs said cryptocurrency wallet addresses linked to First Credit Bank showed consistent inbound flows resembling salary payments, and that the flows likely represented income from IT workers employed abroad under false identities. Treasury also described Korea Mangyongdae Computer Technology Company (KMCTC) as a North Korea-based IT company that dispatched two IT worker delegations to Shenyang and Dandong and used Chinese nationals as banking proxies to hide the origin of fraudulent employment proceeds. The bank-controlled wallets were said to have received more than $12.7 million between June 2023 and May 2025.

    Show sources