DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Han Kwang Hyok seeking use of a U.S. facilitator’s freelance platform account

Date (as written)
May 2023
Year
2023
Country
United States
Actors (as written)
Han Kwang Hyok (Sangsin / SANS FAB)
Actor pages
Han Kwang Hyok
Tags (as written)
IT workers; account renting

Source entries (1)

Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025

Han Kwang Hyok seeking use of a U.S. facilitator’s freelance platform account · May 2023
(MSMT/2025/2, report p. 66) “In 2023, Han Kwang Hyok, a Laos-based DPRK IT worker linked to Sangsin, approached multiple U.S. individuals for collaboration in order to secure employment. In May 2023, Han Kwang Hyok outlined to a U.S.-based facilitator that Han should be able to access the facilitator's freelance employment platform account and apply for jobs in return for a portion of Han's earnings ... Han also used the services of a Ukrainian facilitator”
https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/pdfs/2025-10-22_MSMT-Report.pdf

Suggest a correction on GitHub