2026年10月28日，美国东部时间下午12:31 / CBS新闻
美国财政部已对10名朝鲜人和俄罗斯人实施制裁，这些人是平壤庞大的IT工人欺诈企业的幕后推手——这一朝鲜国营运营体系会制造被盗身份、伪造简历以及假冒IT员工，渗透进合法企业。欺诈所得的数亿美元资金被用于为朝鲜的大规模杀伤性武器和弹道导弹计划提供资金。
该计划的运作逻辑很简单：朝鲜特工伪装成合法的IT专业人士，在不知情的美国及盟友公司获得工作，并将大部分薪资转移回朝鲜政权。一旦进入企业网络，这些工作人员还可访问敏感数据、部署恶意软件，甚至勒索雇主。
在深挖支撑虚假身份的全球联络人、金融中介和洗钱者网络时，调查人员发现该体系的关键环节在俄罗斯运作。周三被列入制裁名单的包括俄罗斯公民维托尔·维克托罗维奇·奥贝塔斯（Vitold Viktorovich Obertas），他是为朝鲜官员安排金融交易的中介。自2025年1月以来，奥贝塔斯已为朝鲜民主主义人民共和国官员处理了近200万美元的加密货币兑换业务，以及至少125万美元的其他货币交易。
财政部海外资产控制办公室还制裁了朝鲜公民金基赫（Kim Ki Hyok），他是驻俄罗斯的IT工人代表团负责人，负责监督该团队人员并确保他们达到财务目标。自2024年以来，他已代表该代表团转账近50万美元的加密货币。
财政部还制裁了位于俄罗斯、由朝鲜控制的第一金融技术发展中心，该中心为朝鲜政权赚取了数百万美元，方式是为美国及全球各地的工作招聘高技能IT工人，并幕后操作加密货币转账。该中心的6名特工也与该组织一同被列入制裁名单。
被制裁人员所有与美国相关的财产及财产权益现已被冻结，美国公民和美国居民一般被禁止与他们开展交易。此次行动不仅是针对个别欺诈者，更是要着手拆解将虚假就业转化为非法收入的体系——最终为朝鲜的武器计划提供资金。
本报道于2026年10月28日下午12:31首次发布于CBS新闻。
Treasury sanctions 10 North Koreans and Russians over IT worker fraud scheme
October 28, 2026 / 12:31 PM EDT / CBS News
The Treasury Department has sanctioned 10 North Koreans and Russians powering Pyongyang’s sprawling IT worker fraud enterprise — a state-run operation that churns out stolen identities, fake résumés and fake IT employees who infiltrate legitimate businesses. The hundreds of millions of dollars in proceeds are then used to fund North Korea’s weapons of mass destruction and ballistic missile programs.
The scheme is simple: North Korean operatives pose as legitimate IT professionals, secure jobs at unwitting U.S. and allied companies, and funnel the majority of their pay back to the regime. Once inside corporate networks, these workers can also access sensitive data, deploy malware and even extort their employers.
In diving into the global web of handlers, financial intermediaries and money launderers bolstering the fake identities, investigators discovered key parts of that machinery operating in Russia. Among those designated Wednesday is Russian national Vitold Viktorovich Obertas, an intermediary who has facilitated financial transactions for North Korean officials. Since January 2025, Obertas has processed nearly $2 million in cryptocurrency conversions and at least $1.25 million in additional currency transactions for DPRK officials.
The Treasury’s Office of Foreign Assets Control also sanctioned North Korean national Kim Ki Hyok, who leads an IT worker delegation in Russia and is responsible for monitoring the group’s personnel and ensuring they meet financial targets. Since 2024, he has transferred nearly $500,000 in cryptocurrency on behalf of the delegation.
The Treasury also sanctioned the Russia-based, North Korean-controlled First Financial and Technical Development Center, which has generated millions for the regime by procuring highly trained IT workers for jobs in the U.S. and worldwide and operating cryptocurrency transfers behind the scenes. Six of its own operatives were designated alongside the organization.
All U.S.-linked property and interests in property of the designated persons have now been blocked, and Americans and U.S. residents are generally prohibited from engaging with them. The action goes beyond targeting individual fraudsters — it’s an effort to begin dismantling the machinery that converts fraudulent employment into illicit revenue — and ultimately into funding for North Korea’s weapons programs.
This story published first on CBS News at 12:31 p.m. on Oct. 28, 2026.
发表回复