Benjamin Nguyen

Benjamin Nguyen is an alias that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and Chollima Hunter. The reports are dated 2026-09-24.

The reporting files it under the persona Benjamin Nguyen, alongside 7 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

alias IT Worker Fraud CURATED

First seen 2026-09-24 · last seen 2026-09-24

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/benjamin-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Benjamin Nguyen / ponyjackal” · pulled 2026-09-09
  • Found on 24 September 2026 by searching GitHub's commit index for every personal address the lazarus.group registry and the ZEUS-DEV-919 working document give for a persona, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so former handles below are a matter of record. github.com/jonyx225 is account id 47555611, created on 12 February 2019, with 222 public repositories. Its commits carry 47555611+ponyjackal@users.noreply.github.com, so it is the account lazarus.group and tayvano list as github.com/ponyjackal, renamed; that handle now returns not found. It signs 84 of the 100 commits GitHub's search returns for it with pony1125@outlook.com, an address the registry gives for Benjamin Nguyen, under the author names pony and ponyjackal.
    github.com/jonyx225 — Chollima Hunter · under “Benjamin Nguyen” · pulled 2026-09-24

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Related indicators

Same persona record: Benjamin Nguyen

Other identifiers the reporting files under the same persona; 6 of 7 are shown.

All 7 on the Benjamin Nguyen page

Cited by the same report: lazarus.group/team/benjamin-nguyen

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 6 other indicators in this source. 1 are shown, chosen across types.

All 7 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.