Kim Hyo Dong

Named individual A separate profile exists for Kim Hyo Dong, matched by name alone. Whether these identifiers belong to that person is the researcher’s attribution, not this site’s.

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Kim Hyo Dong. The attribution is theirs, not this site's.

IT Worker Fraud First reported 2026-08-31

Identifiers attributed to this persona

1 indicator the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Kim Hyo Dong alias —

Kim Hyo Dong

alias IT Worker Fraud RESEARCHER POST

First seen 2026-08-31 · last seen 2026-08-31

Source

  • Named by the researcher as one of two heads of North Korea's Chinyong IT-worker delegation, from photographs the post publishes. Chinyong is the front company already recorded here through the Naoki Murano / Choe Il-kuk material. The post places Kim Sang Man with IT workers in Vladivostok in 2024 and Kim Hyo Dong in Laos in 2023 alongside Naoki Murano and other IT workers. These are named leadership figures rather than fabricated personas, attributed on the strength of the researcher reading the photographs; recorded as the researcher's claim, not as a finding of this site.
    x.com/Narcass3/status/2094245634882851116 — Narcass3 (@Narcass3) · under “Kim Hyo Dong” · published 2026-08-31 · pulled 2026-08-30

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Kim Hyo Dong as the name of the operator is the cited researcher’s assertion, repeated here as their claim.