ZachXBT uncovers North Korea-linked IT worker network generating $1M monthly via crypto payment flows

Blockchain researcher ZachXBT has uncovered a coordinated network of North Korean IT workers utilizing forged identities and fraudulent employment schemes. By analyzing exfiltrated data from an internal payment platform linked to 390 accounts, ZachXBT revealed that the group has generated over $3.5 million since last November. The operation uses a centralized remittance system to distribute earnings, which are then laundered through cryptocurrency transactions and fiat gateways.

While this specific network appears less sophisticated than the notorious Lazarus Group, it demonstrates how North Korea is diversifying its illicit revenue streams beyond high-profile hacks. The investigation highlights the growing threat of North Korean actors infiltrating global tech projects, underscored by recent security incidents at platforms like Stabble and Drift protocol.

(Source：The Block)