Enter password to continue

DPRK IT Workers — Organizational Structure

390 accounts  ·  214 with chat logs  ·  8 Dec 2025 – 28 Feb 2026  ·  derived from server export + chat log analysis

Total payments: $2.84M USD  ·  8 Dec 2025 – 28 Feb 2026

PC-1234 — Admin
Manages all payment accounts · Confirms all team remittances · 0xb51DA…d311998
710 Command Department
710_TJ — Chief, JiHuiBu
Financial Intelligence — Payment Infrastructure & Remittance Summary ▶

Central Receiving Wallet (RB Wallet)

0xb51DA55047Fd899aD08Ab5CE349823664d311998
BEP-20 (BSC) primary · ERC-20 (ETH) secondary · TRC-20 (TRON) used by some teams
All team profits route here via PC-1234

TRC-20 (TRON) Address — 25 txns observed
TSxYS91qoXrJUoMhWaQfMz9p2b7FTw57L3

⚠ Tether Blacklist Event — TRON Address

TSxYS91qoXrJUoMhWaQfMz9p2b7FTw57L3
Event: AddedBlackList
Time: 30 Dec 2025, 22:16:36 UTC
Balance frozen: 77,340.41 USDT (TRC-20)
Tx: 5238464dbbee21b026e0247bf9512b3e5d7ad729fd32e2c887df0a1bde4dc1ac

Payoneer Accounts (provided by PC-1234 to remitters)

b2bms@outlook.com
pandora.llc@outlook.com
noor.llc@outlook.com
MSTshimuli@outlook.com
Ecoskyfarmsllc9@outlook.com
LUPIBLAME1324@outlook.com

US Bank Account (leaked by PC-1234)

JPMorgan Chase Bank
Routing: 028000024
Account: 10000015430925
Shared with hsc1114 (Rajin Marine Transport University)

Cover Identities — Payoneer

Workers use false Western identities to receive client payments:
leonellaplacette2@gmail.com — ChongJin-Industry2
michalmilewski1@outlook.com — CIC team (ri cholho)
oleksii1115@gmail.com — ChongJin-Industry2
Name leaked: Muhammad Junaid / Lupi Blame

Top Remitters (8 Dec 2025 – 28 Feb 2026)

rcm (Unit 1020): $614k USDT
sam (Unit 1020): $306k USDT
chorse (RedStar 2): $271k USDT
peak sin yong (KUT/Base 4): $129k USDT
777 (PyongNam): $70k USDT

Unspecified role — 251 accounts ▶