`0x511b9ed0b7ef9dfad519f398fdfbdf6af8356780`

0x511b9ed0b7ef9dfad519f398fdfbdf6af8356780 is a cryptocurrency wallet address that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-09-09 and the most recent 2026-10-18.

wallet address IT Worker Fraud MATCHED IN SOURCE

Listed as Ethereum

First seen 2026-09-09 · last seen 2026-10-18

Source

…- Frozen Tether Aug 30 2022 (22-sz-19) - 0x815F335f976301f496167bfeF237f0622F92ac38 - Frozen Tether Aug 30 2022 Seized (22-sz-19) - 0x511b9ed0b7ef9dfad519f398fdfbdf6af8356780 - Lu Huaying (OTC 1) - 0x2ad9790b5116ce19b9cc59C7982A64dF0FeA84bc - OTC 2 - 0x4F47Bc496083C727c5fbe3CE9CDf2B0f6496270c - Hyon Sop Sim,…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Addresses in the Forfeiture Action” · published 2025-06-19 · pulled 2026-09-09

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 12 are shown, chosen across types.

All 855 indicators from this source