Chollima Hunter

← Remote Workers

Liu Jian Hua

Liu Jian Hua is an alias that 5 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kawaii Jong UwUn (@KawaiiJongUwUn) and Chollima Hunter. The earliest of those reports is dated 2025-08-09 and the most recent 2026-09-29.

The reporting files it under the persona Liu Jian Hua, alongside 21 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

alias IT Worker Fraud CURATED

First seen 2025-08-09 · last seen 2026-09-29

Sources

  • The researcher's thread opens the Elite Coders team with this identity, naming the X account YouthDream17713 as a North Korean and giving the GitHub account, two portfolios, a Telegram handle and a Freelancer profile. Transcribed from the researcher's chart, which groups every account under the name it gives here and draws its links from mutual follows, shared contact details and repositories carrying one another's details. The chart also gives Discord handles Big Dream#0094, Tom Love#0094, for which this site has no extractor. Accounts on platforms this site does not index, as the chart lists them: mastodon.social/@youthdream, stackblitz.com/@YouthDream0925, reddit.com/user/Ok_Love_2771/, hackerrank.com/profile/youthdream0925, github.com/YouthDream0925/YouthDream0925/commit/f04bceec57c914355d3e9af7c423e5170bdd77d2, kevincrichton.website3.me/, stackoverflow.com/users/20877284/youth-dream, hashnode.com/@youthdream.
    github.com/Kawaii-Jong-UWUn/ITW-Cluster-Research/tree/main/EliteCoder — Kawaii Jong UwUn (@KawaiiJongUwUn) · under “Liu Jian Hua / Kevin Crichton / Tom Love / Big Dream” · published 2025-08-09 · pulled 2026-08-30
  • Found on 12 September 2026 by searching the open web for the account handles this site already holds for this operator, and read directly from the page cited. The DEV Community profile youthdream0925 publishes a link to github.com/YouthDream0925, which is the GitHub account the reporting already attributes to this operator, so the two are tied by the page itself rather than by a coincidence of naming. It joined on 8 March 2024, gives the display name "Dream" and the biography "Software Developer & Good Person", and carries a post about Fabric.js guide lines. A GitLab account under the other login, TomLove223, gives its display name as "Tom Love" — a name this operator is already reported under — and a member-since date of 27 December 2022.
    dev.to/youthdream0925 — Chollima Hunter · under “Liu Jian Hua” · pulled 2026-09-12
  • Found on 18 September 2026 by taking the local part of an address this index already holds for this operator -- lovetompro -- and asking dev.to whether an account exists under it. The address is on a consumer mail host, where the local part is a login the holder chose rather than one an employer assigned; handles taken from company addresses were excluded from this pass for that reason. The account states a registration date of 1 March 2022 and no display name but the handle itself. The login is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
    dev.to/lovetompro — Chollima Hunter · under “Liu Jian Hua” · pulled 2026-09-18
  • Read on 28 September 2026 from the site's own page and the script bundles it loads. The portfolio, beside the YouthDream0925 GitHub account and address, links a Facebook profile and an Instagram account in its footer.
    youthdream.vercel.app/ https://youthdream.vercel.app/ not linked — Chollima Hunter · under “Liu Jian Hua” · pulled 2026-09-28
  • Found on 29 September 2026 by searching GitHub's code for the handles this site already holds for the persona (youthdream0925) and reading the files that name them: contact blocks, profile READMEs and portfolio data in the persona's own repositories or in repositories that credit its accounts. Each value is cited to the file it was read from. Values in copied templates, client team pages and test data are not carried.
    github.com/YouthDream0925/YouthDream0925/blob/3088ff9cffbbde83d6496c78636a0bef113499bd/README1.md — Chollima Hunter · under “Liu Jian Hua” · published 2023-02-11 · pulled 2026-09-29

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Related indicators

Same persona record: Liu Jian Hua

Other identifiers the reporting files under the same persona; 8 of 21 are shown.

All 21 on the Liu Jian Hua page

Cited by the same report: github.com/Kawaii-Jong-UWUn/ITW-Cluster-Research/tree/main/EliteCoder

Kawaii Jong UwUn (@KawaiiJongUwUn) lists 97 other indicators in this source. 2 are shown, chosen across types.

All 98 indicators from this source

Cited by the same report: dev.to/youthdream0925

Chollima Hunter lists 2 other indicators in this source. 1 are shown, chosen across types.

All 3 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.