James Zook
Also reported as: Russel Hieu
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.
Photograph published by the registry under this persona, captioned there as “James Zook 1.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Profiles and evidence
Photograph published by the registry under this persona, captioned there as “James Zook team.”. Others in it are shown as published; only the persona is attributed by the registry.
Identifiers attributed to this persona
7 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
James Zook |
alias | |
Russel Hieu |
alias | |
0x1cf9a8fc7a5568b6dca9f5f73200bc1de69e3ece |
wallet address | |
0x38037c0fafae5c97d411c0460c5f0af40f82b7bd |
wallet address | |
0x4480206854d67338c8b792a1db2a9189ee75d813 |
wallet address | |
0xb5bcb3935e0b3e6a581fba37f40d0f472ccf378a |
wallet address | |
BaHNYFQYsBKX541kjEB9sgoHCc7NQdwc16S5ZE9bmYYv |
wallet address |
James Zook
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Russel Hieu
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x1cf9a8fc7a5568b6dca9f5f73200bc1de69e3ece
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x38037c0fafae5c97d411c0460c5f0af40f82b7bd
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x4480206854d67338c8b792a1db2a9189ee75d813
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0xb5bcb3935e0b3e6a581fba37f40d0f472ccf378a
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
BaHNYFQYsBKX541kjEB9sgoHCc7NQdwc16S5ZE9bmYYv
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- lazarus.group/team/james-zook — Lazarus Group DPRK IT-Worker Registry (lazarus.group)