DPRK IT Worker Revenue - Payment Breakdown by Organization

Attribution of $2.84M+ in tracked remittances routed through PC-1234 / RB Wallet (Korea Ryonbong General Corp ⚠️ OFAC SDN) · Dec 2025 - Feb 2026

Amounts reflect tracked operator-level payments visible in this dataset. Organizational grouping applied where individual operators report under a named entity. Total attributed here (~$1.97M) is a documented subset of the $2.84M+ network total.

Payment amounts are not equivalent to individual earnings. High-value entries (e.g., rcm $614k, sam $306k, chorse $271k) almost certainly represent team financial collectors remitting on behalf of multiple workers, not single-contributor earnings. Low-value entries in the $1k-$8k range are more consistent with individual-level contributions. The actual number of IT workers behind each slice is unknown and likely substantially exceeds the named operator count.

Organizations by Remittance Volume

Published by DTEX Threat Intelligence. This chart is a companion to the DPRK IT Worker Revenue Network org chart. On-chain research credit: ZachXBT.