Shiny Girl
Shiny Girl is an alias
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Seongsu Park (@unpacker) and Chollima Hunter.
The earliest of those reports is dated 2025-08-04 and the most recent 2026-09-24.
The reporting files it under the persona Shiny Girl, alongside 4 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud CURATED
Sources
-
Published as a reply to a @browsercookies post. The researcher calls the identity highly suspicious on the grounds that it claims degrees from Canada and Germany and work in Spain, Denmark, Germany and the United States twice, almost all of it remote. Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The screenshot shows the display name Shiny Girl over the GitHub handle goldsunshines, a bio reading "Backend, automation, bot dev", and 534 followers against 700 following.
x.com/unpacker/status/1952279863920132490 — Seongsu Park (@unpacker) -
Found on 24 September 2026 by searching GitHub's commit index for every personal address this index transcribes from researchers' posts, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so the former handles below are a matter of record. Counts of an account's own commits are over the 100 that GitHub's search returns for it. github.com/noahstoner is account id 135434950, created on 3 June 2023, display name Noah Stoner, bio Devops & Software engineer, location United States, 910 followers. 98 of its 100 own commits are signed shine401020@gmail.com, an address unpacker gives for the identity the researcher calls Shiny Girl, and four commits in its repositories are signed towardsunshine7@gmail.com, which the same post gives for it.
github.com/noahstoner — Chollima Hunter
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.