美国财政部制裁朝鲜IT工作者诈骗协助网络：10名个人与1家实体被列名 为朝鲜武器计划筹资
美国财政部外国资产控制办公室（OFAC）10月28日宣布，制裁10名个人与1家实体，指其在朝鲜政府运作的信息技术（IT）工作者诈骗计划中扮演协助角色：朝鲜IT人员以伪造证件、盗用身份和虚构人设潜入美国等国正规公司任职，薪资被政权抽走，为朝鲜的大规模杀伤性武器与弹道导弹计划筹资。
财政部长 Scott Bessent 表示，朝鲜政权持续以其海外IT人员针对和利用美国公司，通过欺诈活动把敏感数据武器化、向企业勒索巨额款项；在特朗普总统领导下，财政部将继续动用一切可用工具保护美国企业并追究责任人。
本次列名的协助者多在俄罗斯活动。俄罗斯中间人 Vitold Viktorovich Obertas 自2025年1月以来为朝鲜官员经手近200万美元加密货币兑换及至少125万美元其他货币交易；俄罗斯人 Ilya Aleksandrovich Boykov 自2024年以来为相关实体经手约350万美元加密货币兑换与转换。朝鲜国民 Kim Ki Hyok 领导驻俄的一个IT人员代表团，经手近50万美元加密货币转移；另一名朝鲜国民 Kim Hyo Dong 经手逾10万美元资产转移并提供后勤协助。
同被列名的实体「第一金融与技术开发中心」由朝鲜控制、设在俄罗斯，其派驻的6名IT人员自2025年以来合计为朝鲜政府创收逾75万美元。财政部称，这些网络还使用复杂的加密货币交易、洗钱手法与超级智能（SI）工具转移资金；潜入企业网络的IT人员还曾植入恶意软件、窃取敏感数据与专有信息。
财政部称，本次行动承接 OFAC 今年3月12日对另一朝鲜IT工作者网络的列名；本月澳大利亚与欧盟也同步列名支持朝鲜创收与军事活动的人员和实体，美国并与多边制裁监察组参与国等伙伴协作。制裁生效后，被列名者在美国境内或由美国人控制的全部财产与权益将被冻结并须向 OFAC 报告，美国人一般禁止与之交易。
Treasury Sanctions 10 Individuals and One Entity Facilitating DPRK IT Worker Fraud Targeting U.S. Businesses
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) on October 28 sanctioned 10 individuals and one entity for their roles in North Korea's government-run information technology (IT) worker schemes, which use fraudulent documents, stolen identities, and fabricated personas to place workers inside legitimate companies in the United States and allied countries, with most wages appropriated by the regime to fund its weapons of mass destruction and ballistic missile programs.
"The North Korean regime continues targeting and exploiting American companies through fraudulent activities conducted by its overseas IT operatives, who weaponize sensitive data and extort businesses for substantial payments," said Secretary of the Treasury Scott Bessent. "Under President Trump's leadership, Treasury will continue to use all available tools to protect U.S. businesses from these malicious activities and hold those responsible accountable."
Many of those designated operate from Russia. Russian intermediary Vitold Viktorovich Obertas has conducted nearly $2 million worth of cryptocurrency conversions and at least $1.25 million in other currency transactions for North Korean officials since January 2025. Russian national Ilya Aleksandrovich Boykov has supported the network with the equivalent of $3.5 million in cryptocurrency exchanges and conversions since 2024. North Korean national Kim Ki Hyok, who leads a Russia-based delegation of IT workers, has transferred cryptocurrency valued at nearly $500,000, while Kim Hyo Dong has facilitated the transfer of over $100,000 in financial assets.
The designated entity, the First Financial and Technical Development Center, is a North Korea-controlled organization based in Russia; six of its IT workers have collectively generated over $750,000 for the North Korean government since 2025. Treasury said the networks have used sophisticated cryptocurrency transactions, money laundering techniques, and super intelligence (SI) tools, and that DPRK IT workers have also exploited their access to corporate networks to deploy malware and steal sensitive data and proprietary information.
Treasury said the action builds on OFAC's March 12, 2026 designation of a separate DPRK IT worker network, and that Australia and the European Union are also designating related individuals and entities this month. As a result of the action, all property and interests in property of the designated persons in the United States or in the possession or control of U.S. persons are blocked and must be reported to OFAC, and U.S. persons are generally prohibited from transactions involving them.
来源：GSM·美国（原文链接）
图片来源：图：位于华盛顿的美国财政部大楼航拍，G. Edward Johnson 摄。CC BY 4.0，经维基共享资源。 / Aerial view of the U.S. Department of the Treasury building in Washington, D.C., by G. Edward Johnson. CC BY 4.0, via Wikimedia Commons.
