DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Chonsurim IT worker (Ukrainian identity) employed by a European manufacturing company

Date (as written)
August 2022 to July 2023
Year
2022
Actors (as written)
Chonsurim Trading Corporation IT workers (Laos; Department 53, Ministry of National Defense)
Actor pages
Chonsurim Trading Corporation IT workers
Tags (as written)
IT workers; false identities
Dollar figures (as written)
likely exceeded EUR 200,000

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Chonsurim IT worker (Ukrainian identity) employed by a European manufacturing company · August 2022 to July 2023
(MSMT/2025/2, report p. 65) Case Study: Chonsurim (IT workers in Laos): “From August 2022 to July 2023, a Chonsurim IT worker, using a Ukrainian identity, was employed as a freelance developer by a European manufacturing company. Total earnings from the work likely exceeded EUR 200,000.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub