Kim Kwang Jin

Also reported as: Pemba SherpaPemba Gulupaladin-120

Named individual A separate profile exists for Kim Kwang Jin, matched by name alone. Whether these identifiers belong to that person is the researcher’s attribution, not this site’s.

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.

IT Worker Fraud

Identifiers attributed to this persona

7 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Kim Kwang Jin alias —
Pemba Gulu alias —
Pemba Sherpa alias —
pembagelu5232@gmail.com email address —
pembasherpa5232@gmail.com email address —
https://github.com/paladin-120 github profile live checked 2026-08-30
0xfb5d591e8216f5d0964286f09b1f61114c16aab0 wallet address —

Kim Kwang Jin

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09

Pemba Gulu

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09

Pemba Sherpa

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09

pembagelu5232@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

Listed as pemba.gelu5232@gmail.com

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09
  • Nearby text:

    …paladin-120 - pemba.sherpa5232 - pemba.gelu5232 - pemba.sherpa5232@gmail.com - pemba.gelu5232@gmail.com - github.com/paladin-120 • [Archive](https://archive.ph/nVIz9) - 0xfb5d591e8216f5d0964286f09b1f61114c16aab0 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Pemba Sherpa / Pemba Gulu” · published 2025-06-19 · pulled 2026-08-30

pembasherpa5232@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

Listed as pemba.sherpa5232@gmail.com

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09
  • Nearby text:

    …Gulu - 2024, [Zach's List](https://x.com/zachxbt/status/1824047425822310580) - paladin-120 - pemba.sherpa5232 - pemba.gelu5232 - pemba.sherpa5232@gmail.com - pemba.gelu5232@gmail.com - github.com/paladin-120 • [Archive](https://archive.ph/nVIz9) -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Pemba Sherpa / Pemba Gulu” · published 2025-06-19 · pulled 2026-08-30

https://github.com/paladin-120

github profile IT Worker Fraud MATCHED IN SOURCE live checked 2026-08-30

Listed as paladin-120

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09
  • Nearby text:

    …paladin-120 - pemba.sherpa5232 - pemba.gelu5232 - pemba.sherpa5232@gmail.com - pemba.gelu5232@gmail.com - github.com/paladin-120 • [Archive](https://archive.ph/nVIz9) - 0xfb5d591e8216f5d0964286f09b1f61114c16aab0 - https://archive.ph/EM0z1 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Pemba Sherpa / Pemba Gulu” · published 2025-06-19 · pulled 2026-08-30

0xfb5d591e8216f5d0964286f09b1f61114c16aab0

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09

Sources

  • DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Pemba Sherpa / Pemba Gulu” · published 2025-06-19 · pulled 2026-08-30
  • lazarus.group/team/pemba-sherpa — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Kim Kwang Jin / Pemba Sherpa / Pemba Gulu / paladin-120” · pulled 2026-09-09

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Kim Kwang Jin as the name of the operator is the cited researcher’s assertion, repeated here as their claim.