home.treasury.gov US Sanctions 39 Entities in Iran's Shadow Banking Network
Article Content
- •U.S. Treasury sanctioned 39 entities linked to Iran's shadow banking network.
- •Sanctioned entities include front companies enabling trade for Iranian firms.
- •The network reportedly generates tens of billions for the Iranian regime annually.
On November 6, 2026, the U.S. Department of the Treasury sanctioned 39 entities linked to a shadow banking network that facilitates trade for sanctioned Iranian companies, including Persian Gulf Petrochemical Industry Commercial Co. (PGPICC). These entities create front companies abroad to enable transactions for Iranian clients, allowing them to access the international financial system despite sanctions. The network reportedly generates tens of billions of dollars annually for the Iranian regime. This action is part of ongoing efforts to disrupt Iran's financial networks used for money laundering and sanctions evasion. The sanctions target multiple jurisdictions and are a response to Iran's complex sanctions evasion strategies, as highlighted by Deputy Secretary of the Treasury Wally Adeyemo.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Bazargani Refah Zarei Company in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What companies are affected by the sanctions?
What is the purpose of these sanctions?
How does this impact international trade with Iran?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…