`16JW3bVMu8RXPdf3p9iBeosK8q3ZUKe3H8`

16JW3bVMu8RXPdf3p9iBeosK8q3ZUKe3H8 is a cryptocurrency wallet address that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-09-01 and the most recent 2026-10-18.

wallet address IT Worker Fraud MATCHED IN SOURCE

Listed as Bitcoin

First seen 2026-09-01 · last seen 2026-10-18

Source

…/ Leon Lin / leonxdev1 - - 13DjGT8rQqfSrTQ9u8T7LXHFQEoiFxEewh - Consolidaton - - 17NtMaXTaN8JV4doHewx4qpJ7ZxcfbE14f - Consolidaton - - 16JW3bVMu8RXPdf3p9iBeosK8q3ZUKe3H8 - Consolidaton - - 1FZU86w5G2yhgk8Vt2pyRZEkd24zeh8sh5 - Consolidaton 1Gfswj3FL4E5MWWkYzR2fc7pa1uRimgayq - 1 Hop from Vitaliy - $70k Dec…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “1HmqvgSXUVES1jn4TQPzk9dxo1NE8wim2T - Vitaliy Sergeyevich Andreyev's HTX Deposit Address” · published 2025-06-19 · pulled 2026-09-01

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 12 are shown, chosen across types.

All 855 indicators from this source