U.S. Targets North Korean Cyber Operations and Crypto Ponzi Scheme in Major Enforcement Sweep
Treasury sanctions DPRK hacker; DOJ charges OmegaPro leaders in a $650M crypto fraud targeting global investors.
In a sweeping crackdown on global cybercrime and financial fraud, U.S. authorities have taken decisive action against both North Korean cyber operatives and the masterminds behind one of the largest cryptocurrency investment scams in recent memory. The Office of Foreign Assets Control (OFAC) sanctioned a North Korean hacker linked to Pyongyang's intelligence apparatus, while the Department of Justice charged the founders of OmegaPro for orchestrating a $650 million Ponzi scheme.
On Thursday, OFAC announced sanctions against Song Kum Hyok, a North Korean cyber operative affiliated with the Andariel hacking group under the Reconnaissance General Bureau (RGB). According to the Treasury, Song managed illicit IT operations that placed DPRK nationals—often under fake identities—in remote tech jobs across the globe, including in the U.S. The earnings from these covert activities were funneled back to fund North Korea’s weapons and missile programs.
“Thousands of DPRK IT workers continue to exploit international platforms to launder revenue into Pyongyang’s military ambitions,” OFAC stated, noting that some workers also introduced malware into company systems.
The U.S. also sanctioned Russian national Gayk Asatryan and four entities that facilitated a pipeline of North Korean IT labor into Russia. In 2024, Asatryan allegedly entered contracts to deploy up to 80 DPRK workers through his companies, reinforcing a broader network that enables cyber-financing of the North Korean regime.
Simultaneously, the Department of Justice unveiled charges against Michael Shannon Sims and Juan Carlos Reynoso, the founders of OmegaPro. The duo is accused of misleading investors—primarily through cryptocurrency—by promising 300% returns in just 16 months from crypto and forex trading.
The DOJ alleges OmegaPro operated as a global pyramid scheme, preying on vulnerable populations, including in Puerto Rico. To maintain the illusion of legitimacy, Sims and Reynoso hosted extravagant events and flaunted luxury lifestyles online. The scheme unraveled in 2023 when the company claimed to suffer a hacking incident and abruptly shifted investor accounts to a new platform—effectively locking victims out of their funds.
Sims and Reynoso now face federal charges of conspiracy to commit wire fraud and money laundering, each carrying a potential 20-year prison sentence per count.
Together, these actions reflect the U.S. government’s dual strategy of targeting illicit cyber actors aligned with hostile regimes while dismantling fraudulent crypto schemes that prey on global retail investors.
