Kei Haruto
Kei Haruto is an alias
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Hayden McKenzie.
The report is dated 2026-09-23.
The reporting files it under the persona Kei Haruto. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud RESEARCHER POST
Source
-
Hayden McKenzie's report names Kei Haruto as one of two operatives placed at an identity-and-access consultancy through MageHire, presented as Japanese and listed in Dalian, with a client address beginning kei.haruto@ (domain withheld). One of the two was internally said to have no Auth0 experience while billing Auth0 work.
haydenmckenzie.com/research/dprk-it-worker-cell-part-one — Hayden McKenzie
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.