Covert Financial Pipeline Uncovered
A trove of sensitive data detailing the internal financial operations of a North Korean IT worker network has recently surfaced from an anonymous source, shedding light on a previously obscure payment infrastructure.
Substantial Financial Activity Revealed
The leaked records detail nearly 400 accounts, along with associated communications and transaction histories. Analysis indicates that since late November 2025, core addresses within this network have received assets valued at more than $3.5 million.
- Funds were primarily moved and converted through major digital asset trading platforms.
- A portion of the capital was converted into traditional currency and deposited into bank accounts in China.
- One central payment address was frozen by a relevant stablecoin issuer in December 2025 due to flagged activity.
Links to Sanctioned Entities
Investigative tracing has connected this financial network to several commercial entities already under international sanctions. These connections offer fresh insights into certain regional economic patterns.
The source has compiled an organizational chart based on data spanning from December 2025 to February 2026, providing a clearer picture of the network's operational hierarchy.