Jiners Enoheart
Jiners Enoheart is an alias
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Hunter.
The report is dated 2026-09-20.
alias IT Worker Fraud CURATED
Source
-
The entry for this group in x-dossiers.json records that Nisos named Jan Kowalski on one portfolio's about section, and Kornel Dudek, Fred Rowe, Juan Pablo Torres and Thomas Richard in the sites' testimonials, but that none of those names was tied to a particular account and so none was recorded. Reading the accounts themselves supplies what was missing for some of them. Three of the names are what the accounts put in their own GitHub profile name field, read from the API on 20 September 2026: CleverSofter gives Marcin Pawlak, SoftwarePassioner gives Damian Kowalczyk, and Ideal-Softer gives Taylor Fuller. These are not inferred from anything; they are the value the account publishes about itself. Three more come from the commit walk of 19 September 2026, and are more interesting because they cross accounts. Jiners Enoheart signs commits from three distinct GitHub account ids — 160272094, 160324684 and 36896525, which are CleverSofter, SoftwarePassioner and Ideal-Softer. Leon Hoffmann signs commits from two, 38037508 and 38038194, which are eros1006 and VeteranSoftDev. Jan Kowalski, the one name the report did publish, signs commits from four: eros1006, websparkledev, VeteranSoftDev and nulidev. A GitHub noreply address is minted from the account's immutable numeric id, so "the same name from several ids" is a statement about accounts rather than about spellings. Jan Kowalski should not be searched as though it identified anybody. It is the standard Polish placeholder name, the equivalent of John Doe in English, and it is recorded here only because it now attaches to four specific accounts rather than floating in a report. Marcin Pawlak and Damian Kowalczyk are likewise ordinary Polish names and Taylor Fuller an ordinary English one; Jiners Enoheart is the only one of the six distinctive enough that a match on it means much. Their value is that they agree with what Nisos assessed, a network posing as Polish and United States developers, and that they give a reader something to check a job application against. A name here settles nothing about any person. These are the identities the accounts wear, and the people whose names they may have been assembled from are as likely to be uninvolved as not. Nothing on this entry is an assertion that a person of any of these names exists, is a DPRK operator, or has done anything at all.
github.com/CleverSofter — Chollima Hunter
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.