`0x9e66cc61d79bab676c761024850de05a397fc69e`

0x9e66cc61d79bab676c761024850de05a397fc69e is a cryptocurrency wallet address that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-09-01 and the most recent 2026-10-18.

wallet address IT Worker Fraud MATCHED IN SOURCE

Listed as Ethereum

First seen 2026-09-01 · last seen 2026-10-18

Source

…Shezmu Safe - 0x454cD1e89df17cDB61D868C6D3dBC02bC2c38a17 Signer - 0x847a992c0317c6a69b3dbaca494c6ec5a0842317 Shezmu Safe - 0x9e66CC61d79bAb676C761024850De05a397Fc69e Signer - 0xCdFe7F0C70A59FC3c67500b16E8E6b4c2a6A6dE3 Signer - 0xC026609D721C65CDd4EB10F93518f738F52d9e16 Signer + DPRK ITW -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “SHEZMU” · published 2025-06-19 · pulled 2026-09-01

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 12 are shown, chosen across types.

All 855 indicators from this source