Lucas Wong
Lucas Wong is an alias
that 3 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and Chollima Hunter.
The reports are dated 2026-09-24.
The reporting files it under the persona Lucas Wong, alongside 9 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud CURATED
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/lucas-wong — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Found on 12 September 2026 by probing the platforms an operator usually reuses a login on, for the handles this site already holds, and read directly from the page cited. A GitLab account under the login lucaswongc, a member since 19 August 2022, whose display name is Lucas Wong — the name the reporting already gives this operator. No bio, location or links.
gitlab.com/lucaswongc — Chollima Hunter -
Found on 24 September 2026 by searching GitHub's commit index for every personal address the lazarus.group registry and the ZEUS-DEV-919 working document give for a persona, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so former handles below are a matter of record. github.com/codeprom is account id 101302451, created on 10 March 2022, with 92 public repositories and 152 followers. Its commits carry 101302451+lucaswongc@users.noreply.github.com, so it is the account lazarus.group and tayvano list as github.com/lucaswongc, renamed; that handle now returns not found. It signs 59 of the 100 commits GitHub's search returns for it with wm111898@gmail.com, an address the registry gives for Lucas Wong.
github.com/codeprom — Chollima Hunter
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.