Treasury sanctions North Korean IT worker fraud network, including Russia-based facilitators

The U.S. Treasury Department on Wednesday imposed sanctions on 10 individuals, including North Korean and Russian nationals, and one entity over a North Korean government-run scheme that places fake IT workers inside U.S. and allied companies. Treasury's Office of Foreign Assets Control said the workers use stolen identities, fraudulent documents and fake personas to get jobs, then send most of their wages to Pyongyang. Treasury said the money, which CBS reported runs to hundreds of millions of dollars, funds North Korea's weapons of mass destruction and ballistic missile programs. Those named include Russian national Vitold Viktorovich Obertas, who has handled nearly $2 million in cryptocurrency conversions and at least $1.25 million in other transactions for North Korean officials since January 2025. North Korean national Kim Ki Hyok leads an IT worker delegation in Russia. Treasury said workers can also reach sensitive data, deploy malware and extort employers. Secretary Scott Bessent said in a statement that Treasury will keep using all available tools to protect U.S. businesses.

Right-leaning Fox Business and Just the News lead with the Trump administration's action and quote Bessent's statement, including his line crediting President Trump's leadership. Their headlines say the network is "accused" of infiltrating firms or is "facilitating fraud." Fox gives the count as ten individuals and one entity, and Just the News says 10 North Koreans. Neither excerpt names individual targets or mentions Russia. Fox's text also opens with a promotional blurb about a Bessent–Warren dispute. Left-leaning CBS News leads with the Russia connection and the machinery of handlers and money launderers. It names Obertas and Kim Ki Hyok and gives the dollar figures, and it does not feature the Bessent quote in the excerpt. All three agree on the Wednesday OFAC action and the weapons-funding claim. They differ in whether the focus falls on administration messaging or on the people and money involved. The Times of India's item is a headline about a suspected North Korean ballistic missile launch reported by Japan, not the sanctions.