Photo via CBS News

Treasury sanctions North Koreans, Russians over IT worker scheme

Read the original at CBS News ↗
Cite

Sganga, N. (2026, October 28). Treasury sanctions North Koreans, Russians over IT worker scheme. CBS News. https://www.cbsnews.com/news/treasury-sanctions-north-korean-russians-it-worker-fraud/

Dated from the outlet's own feed. Check the original for its byline.

CBS News · collected 2026-10-28 · by Nicole Sganga

Quick Summary

The Treasury Department has sanctioned 10 individuals, including Russians and North Koreans, involved in a scheme where North Korean IT workers pose as legitimate professionals to steal sensitive information and money from U.S. companies. Key figures include Russian national Vitold Viktorovich Obertas, who facilitated $2 million in cryptocurrency transactions for North Korea, and North Korean national Kim Ki Hyok, responsible for transferring nearly $500,000 in cryptocurrency on behalf of the delegation. The sanctions target a Russia-based organization called First Financial and Technical Development Center, which has generated millions by procuring IT workers worldwide and conducting illicit financial activities.
Written by AI on 2026-10-30, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

The U.S. Treasury Department sanctioned 10 North Koreans and Russians involved in a scheme to generate millions of dollars for the North Korean regime through fraudulent IT worker identities. The sanctions target the Russia-based, North Korean-controlled First Financial and Technical Development Center, which procures highly trained IT workers for jobs worldwide, including in the U.S., and operates cryptocurrency transfers covertly. This enterprise has generated hundreds of millions of dollars to fund North Korea's weapons programs. One sanctioned individual is Vitold Viktorovich Obertas, a Russian national who facilitated financial transactions totaling nearly $2 million in cryptocurrency conversions since January 2025.

Written for “Treasury Sanctions Over IT Worker Scheme” on 2026-10-30, grounded in this article and the 0 other(s) covering the same event.
Why this leaning score
This article does not take a side on a contested political question, so it has no leaning score. That is an answer rather than a gap: a match report or a rescue can be warmly or critically written without being left or right, and scoring it anyway is how approval of a subject gets recorded as a political position.
No political leaning scored for article 112470 · logged 2026-10-30

Story

📰 Treasury Sanctions Over IT Worker Scheme
Politics · 1 article(s) covering the same event.

Compared with similar articles

Nothing to compare against. No article is close enough to this one for the pipeline to have linked or judged the pair.
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
13
sentences that state something as happening or true
Uncertain
0%
0 of 13 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
CBS News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Politics
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-30 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

CBS News · 4152 article(s) · 6 correction(s) detected
Running correction rate · 6 correction(s)

Who wrote this

Nicole Sganga
13 article(s) here · 0 carrying a prediction
🔮 The department also amended its civil lawsuit seeking to block certification of the results if Sullivan loses due to "voter confusion," adding in details from a New York Times report on alleged efforts by people associated with Democrat Mary Peltola's campaign to find candidates who could draw votes away from Sullivan.
2026-10-29 · mixed framing · DOJ issues new subpoenas in Alaska Senate probe
🔮 The Justice Department has issued grand jury subpoenas to state and local officials in California, escalating a dispute over allegations by the federal government that the state may have as many as 20,000 non-citizens registered to vote ahead of the midterm elections, according to sources with direct knowledge and copies seen by CBS News.
🔮 The Trump administration is suing to block certification of the if incumbent GOP Sen. Dan Sullivan does not win — but would have won if votes for the other GOP Alaska Senate candidate, Daniel J. Sullivan, were counted for the incumbent.
🔮 In an 11-page filing, prosecutors wrote that investigators recovered evidence suggesting Alfozan may have planned to place even more devices inside offices.
🔮 While appearing on a podcast Friday, Mullin described the ongoing investigation as a "strong case" while suggesting cases of coordinated immigration fraud could be prosecuted under federal racketeering laws.
🔮 The agencies did not immediately identify the exporters involved nor indicate whether any individuals or companies had been charged in the ongoing investigation. HSI Miami Special Agent in Charge Jose Figueroa vowed in a statement that the agency would work with partners to "continue to identify, disrupt and investigate efforts to evade U.S. sanctions, protect the integrity of U.S. export controls and deny the Cuban government access to resources obtained in violation of U.S. law.
🔮 In May 2026, the FBI issued two warnings related to ShinyHunters-linked activity.
🔮 A cyberattack that penetrates those operational systems could potentially be weaponized or manipulated.
🔮 When asked for evidence that the administration's new mail voting rules — which are due to a series of court orders — would prevent fraud, the attorney general initially said that "there's a lot of evidence," arguing that it was inherently the case that "if you're using mail-in voting, the potential for fraud is greater than in-person voting with ID."Pressed further on what evidence he had that mail voting presents a greater risk of fraud than in-person voting with identification, Blanche maintained there is "a lot of evidence."
🔮 Attorney General Todd Blanche vowed that the federal government will continue releasing records related to the Sept. 11, 2001, terrorist attacks, doubling down on U.S. assertions that documents still being withheld are not being kept secret to protect Saudi Arabia or any other government.
Also by Nicole Sganga
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 13 articles by Nicole Sganga →

Topics

North Korea's North Korean Russia Treasury U.S.

Subjects

North Korean NORP · 4× Russia GPE · 3× U.S. GPE · 3× North Korea's GPE · 2× Treasury ORG · 2× Pyongyang GPE · 1× Russian NORP · 1× Russians NORP · 1× The Treasury Department ORG · 1× Vitold Viktorovich Obertas PERSON · 1×

Narrative

The Treasury also sanctioned the Russia-based, North Korean-controlled First Financial and Technical Development Center, which has generated millions for the regime by procuring highly trained IT workers for jobs in the U.S. and worldwide and operating cryptocurrency transfers behind the scenes.
framing: assertive · carried by 1 article(s) · first seen 2026-10-30
2026-10-30 · CBS News
Treasury sanctions North Koreans, Russians over IT worker scheme · assertive framing

Claims (13 extracted, 0 hedged)

The Treasury Department has sanctioned 10 and Russians powering Pyongyang's sprawling IT worker fraud enterprise — a state-run operation that churns out stolen identities, fake résumés and fake IT employees who infiltrate legitimate businesses. asserted
who → sanction → businesses
The hundreds of millions of dollars in proceeds are then used to fund North Korea's weapons of mass destruction and ballistic missile programs. asserted
hundreds → use → destruction
The scheme is simple: North Korean operatives pose as legitimate IT professionals, secure jobs at unwitting U.S. and allied companies, and funnel the majority of their pay back to the regime. asserted
operatives → pose → regime
Once inside corporate networks, these workers can also access sensitive data, deploy malware and even extort their employers. asserted
workers → access → employers
In diving into the global web of handlers, financial intermediaries and money launderers bolstering the fake identities, investigators discovered key parts of that machinery operating in Russia. asserted
investigators → dive → Russia
Among those designated Wednesday is Russian national Vitold Viktorovich Obertas, an intermediary who has facilitated financial transactions for North Korean officials. asserted
who → designate → officials
Since January 2025, Obertas has processed nearly $2 million in cryptocurrency conversions and at least $1.25 million in additional currency transactions for DPRK officials. asserted
Obertas → process → officials
The Treasury's Office of Foreign Assets Control also sanctioned North Korean national Kim Ki Hyok, who leads an IT worker delegation in Russia and is responsible for monitoring the group's personnel and ensuring they meet financial targets. asserted
they → sanction → targets
Since 2024, he has transferred nearly $500,000 in cryptocurrency on behalf of the delegation. asserted
he → transfer → delegation
The Treasury also sanctioned the Russia-based, North Korean-controlled First Financial and Technical Development Center, which has generated millions for the regime by procuring highly trained IT workers for jobs in the U.S. and worldwide and operating cryptocurrency transfers behind the scenes. asserted
which → sanction → scenes
Six of its own operatives were designated alongside the organization. asserted
Six → designate → organization
All U.S.-linked property and interests in property of the designated persons have now been blocked, and Americans and U.S. residents are generally prohibited from engaging with them. asserted
Americans → designate → them
The action goes beyond targeting individual fraudsters — it's an effort to begin dismantling the machinery that converts fraudulent employment into illicit revenue — and ultimately into funding for North Korea's weapons programs. asserted
that → go → programs
💬Give feedback
🕘History 🎫Support