The people sanctioned were used by hackers to “conduct transactions on their behalf to avoid detection” said the Treasury Department.