`0x634e6cd45c38f84c5f362609e821d4b18612e9a2`

0x634e6cd45c38f84c5f362609e821d4b18612e9a2 is a cryptocurrency wallet address that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-09-01 and the most recent 2026-10-18.

wallet address IT Worker Fraud MATCHED IN SOURCE

Listed as Ethereum

First seen 2026-09-01 · last seen 2026-10-18

Source

…https://www.ketman.org/dprk-it-workers-github-organizations.html - https://etherscan.io/token/0x634e6cd45c38f84c5f362609e821d4b18612e9a2?a=0x7473a47da05403313789c43464608552402a888e - x.com/0xMuse9 - x.com/0xnightfly github.com/0xnightfly - x.com/0xopsdev github.com/0xopsdev…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “0xopsdev” · published 2025-06-19 · pulled 2026-09-01

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 12 are shown, chosen across types.

All 855 indicators from this source