DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Cryptocurrency investment scam by Laos-based IT worker Choe Kum Song

Date (as written)
March and April 2023
Year
2023
Actors (as written)
Choe Kum Song (Sangsin / SANS FAB)
Actor pages
Choe Kum Song
Tags (as written)
investment scam; IT workers

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Cryptocurrency investment scam by Laos-based IT worker Choe Kum Song · March and April 2023
(MSMT/2025/2, report p. 66) “In March and April 2023, Choe Kum Song, a Laos-based DPRK IT worker linked to Sangsin, approached multiple individuals to invest in a cryptocurrency investment scam. Choe posed as a female and typically claimed to be from United Arab Emirates, Saudi Arabia, or Oman. ... One victim who was approached by Choe Kum Song subsequently created an account and invested funds. Later, the victim was unable to withdraw any funds nor log into their account.” “In June 2024, Choe Kum Song was an employee of at least three U.S. companies.”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub