Catenaa, Tuesday, March 17, 2026-The US Treasury Department’s Office of Foreign Assets Control sanctioned six individuals and two entities linked to North Korea’s overseas information technology worker programs
It said that the network helped generate nearly $800 million in 2024 through fraudulent employment and cryptocurrency laundering tied to weapons development funding.
Office of Foreign Assets Control Officials said the action targets facilitators operating in North Korea as well as individuals based in Vietnam, Laos and Spain.
According to the Treasury statement, the network enabled North Korean IT workers to obtain remote jobs at US companies using false identities and then move earnings through digital asset channels.
Authorities said one designated individual, identified as a Vietnam based business operator, converted about $2.5 million into cryptocurrency for North Korean beneficiaries between mid 2023 and mid 2025. The funds included proceeds connected to sanctioned entities linked to Pyongyang’s technology operations.
Another individual was accused of assisting in opening bank accounts and facilitating crypto transfers connected to procurement activities.
The sanctions also added multiple cryptocurrency addresses to the US government’s designated list across several blockchain networks, including addresses associated with Ethereum and TRON.
Officials said these designations block access to any property or financial interests held within US jurisdiction and require reporting to authorities. Violations can trigger civil or criminal penalties.
The enforcement action comes amid a surge in cyber operations attributed to North Korea. Blockchain analytics firm Chainalysis reported that DPRK linked hackers stole more than $2.17 billion in cryptocurrency during the first half of 2025, exceeding total thefts recorded in all of 2024.
Analysts said one of the largest incidents involved the February breach of the crypto exchange Bybit, where attackers reportedly drained nearly $1.5 billion in Ethereum.
Security experts say such operations often rely on social engineering, fraudulent job listings and cross border financial networks to disguise fund flows.
US officials have increasingly focused on disrupting revenue streams that support North Korea’s nuclear and missile programs.
Treasury leaders said the latest sanctions aim to cut off financial pathways used to support weapons development and related procurement efforts.
The action highlights continued cooperation between cybersecurity investigators and financial intelligence agencies as governments attempt to trace digital asset movements across global networks. Authorities said they will continue monitoring blockchain transactions linked to sanctioned actors and expand enforcement where necessary.
