Sandy Nguyen
Also reported as: xgraciassmarterdegenbullishgopherversatile-programmer
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.
Photograph published by the registry under this persona, captioned there as “Profile picture of Sandy Nguyen.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Profiles and evidence
Photograph published by the registry under this persona, captioned there as “Image of Sandy Nguyen.”. Others in it are shown as published; only the persona is attributed by the registry.
LinkedIn accounts
tkcong
removed
linkedin profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as tkcong
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…github.com/bullishgopher • [Archive](https://web.archive.org/web/20231205224337/https://github.com/bullishgopher) - https://linkedin.com/in/tkcong/ (https://x.com/bullishgopher/status/1272680031681155074) - https://web3.career/@bullishgopher -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Identifiers reported alongside
17 indicators filed under the same heading, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Sandy Nguyen |
alias | |
smarterdegen |
alias | |
versatile-programmer |
alias | |
xgracias |
alias | |
superwebdev0330@gmail.com |
email address | |
tkcong@gmail.com |
email address | |
wictor95@bk.ru |
email address | |
smarterdegen.eth |
ens name | |
https://github.com/bullishgopher |
github profile | removed |
0x2a8f7065eccfa6d8ee49ea9a256315fb6374ee2e |
wallet address | |
0x5fdd9679b656e48c7f899c65a47503ec8732fc6c |
wallet address | |
0x7af7a8e4a0190bf3e48f3a021fb9251ea915e4d8 |
wallet address | |
0xb2c681b80ca1f35bf379a3fd44b0eaed032c982a |
wallet address | |
0xe1157497de4d4b0780474da85990ece6ccb0ad36 |
wallet address | |
79Jqz5La12SVDZKJD9YRiP9s39W3NEtki7PUdF3CPWzJ |
wallet address | |
EW8oTqNfWi2eQZPqDSG6YqJJnGb6rL4DvDukW421Fzc |
wallet address | |
https://x.com/bullishgopher |
x account |
Sandy Nguyen
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
smarterdegen
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
versatile-programmer
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
xgracias
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
superwebdev0330@gmail.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
tkcong@gmail.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
wictor95@bk.ru
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
smarterdegen.eth
ens name IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://github.com/bullishgopher
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as bullishgopher
removed
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
… #### Sandy Nguyen - xgracias - smarterdegen.eth - bullishgopher - x.com/bullishgopher - github.com/bullishgopher • [Archive](https://web.archive.org/web/20231205224337/https://github.com/bullishgopher) - https://linkedin.com/in/tkcong/…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
0x2a8f7065eccfa6d8ee49ea9a256315fb6374ee2e
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x5fdd9679b656e48c7f899c65a47503ec8732fc6c
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x7af7a8e4a0190bf3e48f3a021fb9251ea915e4d8
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0xb2c681b80ca1f35bf379a3fd44b0eaed032c982a
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0xe1157497de4d4b0780474da85990ece6ccb0ad36
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
79Jqz5La12SVDZKJD9YRiP9s39W3NEtki7PUdF3CPWzJ
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
EW8oTqNfWi2eQZPqDSG6YqJJnGb6rL4DvDukW421Fzc
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://x.com/bullishgopher
x account IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- lazarus.group/team/sandy-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group)