Artur Dranhoi

Artur Dranhoi is an alias that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group).

alias IT Worker Fraud THIRD-PARTY REGISTRY

Listed under Artur Dranhoi, Oleksandr Muravskyi.

First seen unknown · last seen unknown

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/artur-dranhoi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Artur Dranhoi / artur.dranhoi1025 / Prince Charming / princecharming0915” · pulled 2026-09-09
  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Oleksandr Muravskyi / Artur Dranhoi / oleksandr-muravskyi / PrinceCharming0115” · pulled 2026-09-09

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Related indicators

Same persona record: Artur Dranhoi

Other identifiers the reporting files under the same persona; 2 of 3 are shown.

All 3 on the Artur Dranhoi page

Same persona record: Oleksandr Muravskyi

Other identifiers the reporting files under the same persona.

Cited by the same report: lazarus.group/team/artur-dranhoi

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 3 other indicators in this source. 1 are shown, chosen across types.

All 4 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.