home.treasury.gov US Sanctions Target Iran's Shadow Banking Amid Protests
Article Content
- •35 entities and individuals sanctioned for facilitating Iran's shadow banking.
- •Sanctions aim to disrupt funding for terrorism and military operations.
- •U.S. supports Iranian protests for freedom and economic security.
On November 6, 2026, the U.S. Department of the Treasury's OFAC sanctioned 35 entities and individuals linked to Iran's shadow banking system, which facilitates sanctions evasion and terrorism funding. This action is part of a broader initiative called Economic Fury, aimed at disrupting financial networks that support Iran's military and terrorist activities. The sanctions come as Iranians protest for freedom and economic security, with the U.S. expressing support for these demonstrations. Key figures targeted include those involved in the regime's violent crackdown on protesters and the laundering of oil revenues through clandestine banking networks. The sanctions are intended to hold accountable those enabling the Iranian regime's oppressive actions and to protect U.S. interests and allies in the region.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track IRGC and Bank-e Shahr in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What entities are affected by the sanctions?
What is the U.S. response to the Iranian protests?
How do these sanctions affect international financial institutions?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…