Pete Yama

Pete Yama is an alias that 3 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and Chollima Hunter.

The reporting files it under the persona Pete Yama, alongside 11 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

alias IT Worker Fraud CURATED

First seen unknown · last seen unknown

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/pete-yama — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Pete Yama / Bill Tovitt / cryptopunk / cryptopunkclan / bestsilvertiger / brightdragon0719 / btcwhiz / abcd_0621_ / hunter0409 / building_jk” · pulled 2026-09-09
  • Found on 12 September 2026 by searching the open web for the account handles this site already holds for this operator, and read directly from the page cited. The GitLab account under the login hunter0409 states its display name as Pete Yama — the name the reporting already gives this operator — and a member-since date of 19 May 2022, with no bio and no links. The DEV Community account under the login bestsilvertiger joined on 6 March 2024, publishes a link to github.com/BestSilverTiger, which is the GitHub account already attributed here, and gives as its entire biography the string "404 bio not found".
    gitlab.com/hunter0409 — Chollima Hunter · under “Pete Yama” · pulled 2026-09-12
  • Found on 18 September 2026 by putting bestsilvertiger, one of the GitHub logins the index already holds for this operator, to Maigret's username search and then asking Freelancer's public user endpoint, which answers with the account record and, for a name that does not exist, with nothing. Freelancer returns the account with the display name Closed User and a registration date of 4 August 2020: an account existed under the handle and has since been closed, which is recorded here because a closed account is still a registration, and the date is the one fact it states. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
    www.freelancer.com/u/bestsilvertiger — Chollima Hunter · under “Pete Yama” · pulled 2026-09-18

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Related indicators

Same persona record: Pete Yama

Other identifiers the reporting files under the same persona; 8 of 11 are shown.

All 11 on the Pete Yama page

Cited by the same report: lazarus.group/team/pete-yama

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 8 other indicators in this source. 2 are shown, chosen across types.

All 9 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.