Chollima Hunter

Browse indicators

Every indicator this site holds, 28,594 in all, listed by type and then by value. Each value links to its own page, which carries every source that reported it and the text around it. To look up one value, the search on Remote Workers is faster.

TypeIndicatorsPages
IP addresses 11,045 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
Email addresses 5,683 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
File hashes 3,434 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18
Compromised repositories 2,451 1 2 3 4 5 6 7 8 9 10 11 12 13
GitHub accounts 2,069 1 2 3 4 5 6 7 8 9 10 11
Npm packages 726 1 2 3 4
Aliases 681 1 2 3 4
Cryptocurrency wallet addresses 494 1 2 3
Domains 397 1 2
LinkedIn accounts 195 1
Telephone numbers 170 1
Telegram accounts 159 1
Malicious repositories 153 1
Hosted sites 142 1
Smart contract addresses 106 1
X accounts 97 1
GitLab accounts 90 1
Payload URLs 67 1
Usernames 54 1
DEV Community accounts 50 1
Transaction hashes 41 1
Docker Hub accounts 36 1
Autonomous system numbers 25 1
Medium accounts 25 1
File names 23 1
Skype accounts 20 1
Hugging Face accounts 17 1
Calendly accounts 13 1
Freelancer.com accounts 11 1
Keybase accounts 9 1
CodeSandbox accounts 8 1
Personal sites 8 1
Chrome extensions 7 1
ENS names 7 1
Trello accounts 7 1
Discord accounts 6 1
Fiverr accounts 6 1
Torre accounts 5 1
XING accounts 5 1
Facebook accounts 4 1
LaborX accounts 4 1
PyPI packages 4 1
Remote OK accounts 4 1
Freelancermap accounts 3 1
Himalayas accounts 3 1
Instagram accounts 3 1
Stack Overflow accounts 3 1
Linktree accounts 2 1
Quora accounts 2 1
RemoteHub accounts 2 1
Upwork accounts 2 1
Web3.career accounts 2 1
Crypto.jobs accounts 1 1
CryptoJobsList accounts 1 1
Devpost accounts 1 1
Entre accounts 1 1
F6S accounts 1 1
GitHub search queries 1 1
Hashnode accounts 1 1
Klimbup accounts 1 1
Odnoklassniki accounts 1 1
Peerlist accounts 1 1
Product Hunt accounts 1 1
Useme accounts 1 1
Wantedly accounts 1 1
YouTube accounts 1 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.