Choe Il-kuk

Also reported as: Naoki

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Choe Il-kuk. The attribution is theirs, not this site's.

IT Worker Fraud First reported 2025-10-26

Identifiers attributed to this persona

2 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Choe Il-kuk alias —
Naoki alias —

Choe Il-kuk

alias IT Worker Fraud RESEARCHER POST

First seen 2025-10-26 · last seen 2025-10-26

Source

  • The researcher states that the operator tracked as Naoki is really named Choe Il-kuk, and that he works under Chinyong Information Technology Cooperation Company, a DPRK front company acting for Bureau 61 of the Ministry of National Defense. Naoki Murano and Chinyong both appear in this repository from other sources. This is a real-name attribution against an existing identity, which is a stronger claim than anything else in this file, and it is carried as the researcher's assertion and not as a finding of this site.
    x.com/narcass3/status/1982589954644718075 — Narcass3 (@Narcass3) · under “Choe Il-kuk / Naoki” · published 2025-10-26 · pulled 2026-08-30

Naoki

alias IT Worker Fraud RESEARCHER POST

First seen 2025-10-26 · last seen 2025-10-26

Source

  • The researcher states that the operator tracked as Naoki is really named Choe Il-kuk, and that he works under Chinyong Information Technology Cooperation Company, a DPRK front company acting for Bureau 61 of the Ministry of National Defense. Naoki Murano and Chinyong both appear in this repository from other sources. This is a real-name attribution against an existing identity, which is a stronger claim than anything else in this file, and it is carried as the researcher's assertion and not as a finding of this site.
    x.com/narcass3/status/1982589954644718075 — Narcass3 (@Narcass3) · under “Choe Il-kuk / Naoki” · published 2025-10-26 · pulled 2026-08-30

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Choe Il-kuk as the name of the operator is the cited researcher’s assertion, repeated here as their claim.