Marvyn Pingul

Marvyn Pingul is an alias that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Hunter. The report is dated 2026-05-29.

The reporting files it under the persona Kaspar Kruus, alongside 19 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

alias IT Worker Fraud CURATED

First seen 2026-05-29 · last seen 2026-05-29

Source

  • Read on 3 October 2026 from GitHub commit histories. Commits authored under the name Kaspar Kruus, a name a researcher published in August 2025 as an alias of one operator, come from four accounts: marvynpingul (account ID 165824649, formerly logged in as petermantop, which its own private commit address still names) at petermantop@gmail.com; Kasparexzi at kaspar@exzi.com; kaspar-atrnous at kaspar.kruus@atronous.ai, which pushed a repository named veriff-face-api in May 2025; and Kaspar-Kruus99 at kasparkruus99@outlook.com. From May 2026 the same petermantop@gmail.com mailbox signs its commits Marvyn Pingul. The accounts and the full network around them are set out in the candidate entry kaspar-kruus.
    github.com/marvynpingul/nifi-flow-test/commits — Chollima Hunter · under “Kaspar Kruus” · published 2026-05-29 · pulled 2026-10-03

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Related indicators

Same persona record: Kaspar Kruus

Other identifiers the reporting files under the same persona; 12 of 19 are shown.

All 19 on the Kaspar Kruus page

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.