USA vs MINH QUOC NGUYEN
2023-03-14 • USJustice •
https://www.justice.gov/opa/press-release/file/1574581/download
Attachments
filed_complaint_0.pdf (2 MB)
A U.S. criminal complaint alleged that Minh Quoc Nguyen operated ChipMixer, an online bitcoin mixer used to conceal proceeds from cybercrime and other illegal activity. The affidavit says ChipMixer had facilitated roughly $3 billion in bitcoin laundering since 2017, including funds tied to ransomware payments, thefts, darknet markets, nation-state criminal activity, and other crimes. Investigators alleged Nguyen used aliases and stolen identities to buy and maintain infrastructure, move illicit funds, and evade law-enforcement detection. The source frames ChipMixer as an unregistered money-services business and a laundering service relevant to tracking cybercrime and state-linked cryptocurrency flows, without naming a specific DPRK actor in the provided excerpt.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| DOMAIN | outlook.com | 2018-09-06 | 2026-04-17 |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| djekrntofroekskewjjsskkw1@gmail… | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| [email protected] | 2023-03-14 | 2023-03-14 | |
| URL | https://health-sex-money.com | 2023-03-14 | 2023-03-14 |
| URL | https://businessallianceonline.… | 2023-03-14 | 2023-03-14 |
| DOMAIN | qw6xpezaqb57xsviksbsbjlrftevt52… | 2023-03-14 | 2023-03-14 |
| DOMAIN | businessallianceonline.com | 2023-03-14 | 2023-03-14 |
| DOMAIN | chipmixorflykuxu56uxy7gf5o6ggig… | 2023-03-14 | 2023-03-14 |
| DOMAIN | chipmixer.com | 2023-03-14 | 2023-03-14 |
| DOMAIN | bestmixer.io | 2023-03-14 | 2023-03-14 |
| DOMAIN | rambowriter.com | 2023-03-14 | 2023-03-14 |
| DOMAIN | blackhatworld.com | 2023-03-14 | 2023-03-14 |
| DOMAIN | chipmixerwzxtzbw.onion | 2023-03-14 | 2023-03-14 |
| DOMAIN | chipmixer.io | 2023-03-14 | 2023-03-14 |
| DOMAIN | health-sex-money.com | 2023-03-14 | 2023-03-14 |
| IPv4 | 59.153.240.33 | 2023-03-14 | 2023-03-14 |
| IPv4 | 123.16.111.73 | 2023-03-14 | 2023-03-14 |
| IPv4 | 193.8.172.163 | 2023-03-14 | 2023-03-14 |
| IPv4 | 123.24.236.184 | 2023-03-14 | 2023-03-14 |
| IPv4 | 46.101.124.25 | 2023-03-14 | 2023-03-14 |
| IPv4 | 109.70.100.18 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.76.119.17 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.42.202.171 | 2023-03-14 | 2023-03-14 |
| IPv4 | 137.74.169.241 | 2023-03-14 | 2023-03-14 |
| IPv4 | 140.127.112.209 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.77.64.64 | 2023-03-14 | 2023-03-14 |
| IPv4 | 107.173.30.140 | 2023-03-14 | 2023-03-14 |
| IPv4 | 14.248.130.210 | 2023-03-14 | 2023-03-14 |
| IPv4 | 138.201.227.85 | 2023-03-14 | 2023-03-14 |
| IPv4 | 222.252.88.76 | 2023-03-14 | 2023-03-14 |
| IPv4 | 14.248.151.213 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.42.200.243 | 2023-03-14 | 2023-03-14 |
| IPv4 | 185.220.101.6 | 2023-03-14 | 2023-03-14 |
| IPv4 | 113.190.206.177 | 2023-03-14 | 2023-03-14 |
| IPv4 | 92.223.93.151 | 2023-03-14 | 2023-03-14 |
| IPv4 | 59.153.240.94 | 2023-03-14 | 2023-03-14 |
| IPv4 | 107.175.87.18 | 2023-03-14 | 2023-03-14 |
| IPv4 | 59.153.241.230 | 2023-03-14 | 2023-03-14 |
| IPv4 | 121.56.97.178 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.14.114.217 | 2023-03-14 | 2023-03-14 |
| IPv4 | 185.127.92.163 | 2023-03-14 | 2023-03-14 |
| IPv4 | 58.186.28.118 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.76.91.219 | 2023-03-14 | 2023-03-14 |
| IPv4 | 59.153.241.55 | 2023-03-14 | 2023-03-14 |
| IPv4 | 60.248.123.154 | 2023-03-14 | 2023-03-14 |
| IPv4 | 83.143.107.32 | 2023-03-14 | 2023-03-14 |
| IPv4 | 107.155.97.170 | 2023-03-14 | 2023-03-14 |
| IPv4 | 136.243.102.235 | 2023-03-14 | 2023-03-14 |
| IPv4 | 59.153.235.168 | 2023-03-14 | 2023-03-14 |
| IPv4 | 59.153.241.41 | 2023-03-14 | 2023-03-14 |
| IPv4 | 142.132.185.86 | 2023-03-14 | 2023-03-14 |
| IPv4 | 45.76.89.113 | 2023-03-14 | 2023-03-14 |
| IPv4 | 123.24.209.156 | 2023-03-14 | 2023-03-14 |
| IPv4 | 222.252.92.39 | 2023-03-14 | 2023-03-14 |
| DOMAIN | ymail.com | 2019-08-21 | 2023-03-14 |