Kim Sang Man
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Kim Sang Man. The attribution is theirs, not this site's.
Two photographs the researcher publishes of Kim Sang Man, labelled by them: at left in Vladivostok in February 2024 among Chinyong IT workers, at right the portrait filed in U.S. Civil Action No. 25-cv-1769. He is a named, OFAC-sanctioned DPRK official, so this is his identified likeness rather than a persona avatar.
Profiles and evidence
The wider Chinyong IT-worker delegation in a Vladivostok stadium crowd, February 2024, with Kim Sang Man boxed by the researcher at lower left. Published to place him among the delegation; the other faces are the workers he oversaw and are not individually named.
Identifiers attributed to this persona
5 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Kim Sang Man |
alias | |
0x97b1043abd9e6fc31681635166d430a458d14f9c |
wallet address | |
0xb6f5ec1a0a9cd1526536d3f0426c429529471f40 |
wallet address | |
1D6gG9iKEhPitTcWRJiniuj1jYM2hNeAfJ |
wallet address | |
1FCNgfZWpYMeYhy9t18AAkTBu8AsdoAc1Z |
wallet address |
Kim Sang Man
alias IT Worker Fraud RESEARCHER POST
Source
-
Named by the researcher as one of two heads of North Korea's Chinyong IT-worker delegation, from photographs the post publishes. Chinyong is the front company already recorded here through the Naoki Murano / Choe Il-kuk material. The post places Kim Sang Man with IT workers in Vladivostok in 2024 and Kim Hyo Dong in Laos in 2023 alongside Naoki Murano and other IT workers. These are named leadership figures rather than fabricated personas, attributed on the strength of the researcher reading the photographs; recorded as the researcher's claim, not as a finding of this site. Kim Sang Man is also named on the OFAC sanctions list, where he appears in connection with Chinyong; the Gary Lee dossier here cites a $300,000 transfer to him. The four cryptocurrency addresses are the digital currency addresses OFAC listed for KIM, Sang Man (Korean: 김상만; a.k.a. KIM, Sangman) on its Specially Designated Nationals list, reproduced in the cited post.
x.com/Narcass3/status/2094245634882851116 — Narcass3 (@Narcass3)
0x97b1043abd9e6fc31681635166d430a458d14f9c
wallet address IT Worker Fraud MATCHED IN SOURCE
Listed as Ethereum
Sources
-
Named by the researcher as one of two heads of North Korea's Chinyong IT-worker delegation, from photographs the post publishes. Chinyong is the front company already recorded here through the Naoki Murano / Choe Il-kuk material. The post places Kim Sang Man with IT workers in Vladivostok in 2024 and Kim Hyo Dong in Laos in 2023 alongside Naoki Murano and other IT workers. These are named leadership figures rather than fabricated personas, attributed on the strength of the researcher reading the photographs; recorded as the researcher's claim, not as a finding of this site. Kim Sang Man is also named on the OFAC sanctions list, where he appears in connection with Chinyong; the Gary Lee dossier here cites a $300,000 transfer to him. The four cryptocurrency addresses are the digital currency addresses OFAC listed for KIM, Sang Man (Korean: 김상만; a.k.a. KIM, Sangman) on its Specially Designated Nationals list, reproduced in the cited post.
x.com/zachxbt/status/1812856350151766209 — Narcass3 (@Narcass3) -
…Digital Currency Address - XBT 1FCNgfZWpYMeYhy9t18AAkTBu8AsdoAc1Z; Digital Currency Address - ETH 0x97b1043abd9e6fc31681635166d430a458d14f9c; alt.…
North Korea Designations; Issuance of Venezuela-related General License | Office of Foreign Assets Control — Office of Foreign Assets Control (OFAC)
0xb6f5ec1a0a9cd1526536d3f0426c429529471f40
wallet address IT Worker Fraud MATCHED IN SOURCE
Listed as Ethereum
Sources
-
Named by the researcher as one of two heads of North Korea's Chinyong IT-worker delegation, from photographs the post publishes. Chinyong is the front company already recorded here through the Naoki Murano / Choe Il-kuk material. The post places Kim Sang Man with IT workers in Vladivostok in 2024 and Kim Hyo Dong in Laos in 2023 alongside Naoki Murano and other IT workers. These are named leadership figures rather than fabricated personas, attributed on the strength of the researcher reading the photographs; recorded as the researcher's claim, not as a finding of this site. Kim Sang Man is also named on the OFAC sanctions list, where he appears in connection with Chinyong; the Gary Lee dossier here cites a $300,000 transfer to him. The four cryptocurrency addresses are the digital currency addresses OFAC listed for KIM, Sang Man (Korean: 김상만; a.k.a. KIM, Sangman) on its Specially Designated Nationals list, reproduced in the cited post.
x.com/zachxbt/status/1812856350151766209 — Narcass3 (@Narcass3) -
…Digital Currency Address - ETH 0xb6f5ec1a0a9cd1526536d3f0426c429529471f40; Secondary sanctions risk: North Korea Sanctions Regulations, sections 510.201 and 510.210; Transactions Prohibited For Persons Owned or…
North Korea Designations; Issuance of Venezuela-related General License | Office of Foreign Assets Control — Office of Foreign Assets Control (OFAC)
1D6gG9iKEhPitTcWRJiniuj1jYM2hNeAfJ
wallet address IT Worker Fraud MATCHED IN SOURCE
Listed as Bitcoin
Sources
-
Named by the researcher as one of two heads of North Korea's Chinyong IT-worker delegation, from photographs the post publishes. Chinyong is the front company already recorded here through the Naoki Murano / Choe Il-kuk material. The post places Kim Sang Man with IT workers in Vladivostok in 2024 and Kim Hyo Dong in Laos in 2023 alongside Naoki Murano and other IT workers. These are named leadership figures rather than fabricated personas, attributed on the strength of the researcher reading the photographs; recorded as the researcher's claim, not as a finding of this site. Kim Sang Man is also named on the OFAC sanctions list, where he appears in connection with Chinyong; the Gary Lee dossier here cites a $300,000 transfer to him. The four cryptocurrency addresses are the digital currency addresses OFAC listed for KIM, Sang Man (Korean: 김상만; a.k.a. KIM, Sangman) on its Specially Designated Nationals list, reproduced in the cited post.
x.com/zachxbt/status/1812856350151766209 — Narcass3 (@Narcass3) -
…North; DOB 25 Apr 1965; POB North Pyongan Province, North Korea; nationality Korea, North; Gender Male; Digital Currency Address - XBT 1D6gG9iKEhPitTcWRJiniuj1jYM2hNeAfJ; alt.…
North Korea Designations; Issuance of Venezuela-related General License | Office of Foreign Assets Control — Office of Foreign Assets Control (OFAC)
1FCNgfZWpYMeYhy9t18AAkTBu8AsdoAc1Z
wallet address IT Worker Fraud MATCHED IN SOURCE
Listed as Bitcoin
Sources
-
Named by the researcher as one of two heads of North Korea's Chinyong IT-worker delegation, from photographs the post publishes. Chinyong is the front company already recorded here through the Naoki Murano / Choe Il-kuk material. The post places Kim Sang Man with IT workers in Vladivostok in 2024 and Kim Hyo Dong in Laos in 2023 alongside Naoki Murano and other IT workers. These are named leadership figures rather than fabricated personas, attributed on the strength of the researcher reading the photographs; recorded as the researcher's claim, not as a finding of this site. Kim Sang Man is also named on the OFAC sanctions list, where he appears in connection with Chinyong; the Gary Lee dossier here cites a $300,000 transfer to him. The four cryptocurrency addresses are the digital currency addresses OFAC listed for KIM, Sang Man (Korean: 김상만; a.k.a. KIM, Sangman) on its Specially Designated Nationals list, reproduced in the cited post.
x.com/zachxbt/status/1812856350151766209 — Narcass3 (@Narcass3) -
…Digital Currency Address - XBT 1FCNgfZWpYMeYhy9t18AAkTBu8AsdoAc1Z; Digital Currency Address - ETH 0x97b1043abd9e6fc31681635166d430a458d14f9c; alt.…
North Korea Designations; Issuance of Venezuela-related General License | Office of Foreign Assets Control — Office of Foreign Assets Control (OFAC)
Sources
- North Korea Designations; Issuance of Venezuela-related General License | Office of Foreign Assets Control — Office of Foreign Assets Control (OFAC)
- x.com/Narcass3/status/2094245634882851116 — Narcass3 (@Narcass3)
- x.com/zachxbt/status/1812856350151766209 — Narcass3 (@Narcass3)