Janul Azwan
Janul Azwan is an alias
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and Chollima Hunter.
The reporting files it under the persona Janul Azwan, alongside 6 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud CURATED
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/janul-azwan — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Read on 12 September 2026 from the page cited. ethprotector is one of the names the reporting already files this operator under, and the URL appears inside a researcher’s note this site already quotes, but it had never been recorded as an indicator of its own. The profile is a bug-bounty account on Immunefi: a member since 8 April 2024, ranked 520th all time, total earnings of $13,697, one bug-bounty report rated high, and two audit-competition reports. A DPRK IT-worker persona paid through a whitehat bounty platform is being paid by the projects it reports bugs to, under a name and a payment route of its own choosing, which is a different funding path from the salaried contract work this dataset is mostly about. Nothing here establishes that the reports were not genuine security work.
immunefi.com/profile/ethprotector — Chollima Hunter
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.