Black & White Path

Apr 9, 2026 · Information Security

North Korean IT Worker’s ‘123456’ Password Exposes $1M Money‑Laundering Backend

An investigation by ZachXBT uncovered that a North Korean IT laborer’s use of the default password “123456” on the internal payment platform luckyguys.site allowed researchers to access a $1 million‑per‑month money‑laundering operation, revealing weak OpSec, infostealer infection, forged identities, and links to OFAC‑sanctioned companies.