The Trump administration imposed sanctions on 10 individuals who used fraudulent tactics and false identities to fund North Korea's weapons programs on Wednesday. This network was directed by Pyongyang and involved fake IT workers with stolen identities who infiltrated U.S. companies to help finance the production of ballistic missiles and weapons of mass destruction.
The scheme was as follows: North Korean workers posed as IT specialists, secured jobs at powerful companies, and sent most of their salaries back to the regime, collecting hundreds of millions of dollars. In turn, the spies are accused of accessing internal data, using malware, and extorting employers.
In this intelligence operation, the Russians acted as front men laundering money and providing assistance with false documents. One of these intermediaries, Vitold Viktorovich Obertas, processed nearly $2 million in cryptocurrency conversions and at least $1.25 million in other currency transactions for North Korean officials since early 2025.
The Secretary of the Treasury, Scott Bessent, issued a statement saying: "The North Korean regime continues to target and exploit U.S. companies through fraudulent activities carried out by its IT operatives abroad, who weaponize sensitive data and extort businesses for substantial payments."
