OFAC sanctioned eight individuals and two entities accused of helping North Korea raise and move funds through cybercrime, fraudulent IT labor, digital asset theft, and sanctions evasion. SlowMist highlights Ryujong Credit Bank and Korea Mangyongdae Computer Technology Corporation as part of a financial network spanning North Korea, China, and Russia, with representatives facilitating remittances, laundering, overseas worker payments, and transactions for sanctioned banks. The on-chain section analyzes 53 USDT-TRC20 addresses associated with Cheil Credit Bank that collectively received about 16 million USDT, with transaction activity concentrated from mid-2024 through the first half of 2025. The report matters for crypto AML teams because it shows DPRK-linked revenue channels combining human financial representatives, IT-worker fraud, ransomware-linked proceeds, exchange hot wallets, multi-stage transfers, and frozen Tether balances.