Usernames

54 usernames reported in published sources on North Korean (DPRK) cyber operations, ordered by value. Each value links to its own page, which carries every source that reported it and the text around it. Other types are listed in the browse directory.

ValueCampaignFiled underSources
achiever0123 IT Worker Fraud 1
Azure Phoenix IT Worker Fraud 1
benjaminstewart123 IT Worker Fraud 1
besthonestman IT Worker Fraud 1
care823 IT Worker Fraud 1
createnewhistory IT Worker Fraud 1
cryptobunny0x IT Worker Fraud 1
dedicatedsoftwaredev IT Worker Fraud 1
devtwinkler IT Worker Fraud 1
dylandev125 IT Worker Fraud 1
fredericrowe IT Worker Fraud 1
gitakileus IT Worker Fraud 1
graeme2115 IT Worker Fraud 1
greengarden510 IT Worker Fraud 1
harbon486 IT Worker Fraud 1
Li_dani IT Worker Fraud 1
lucaslee129 IT Worker Fraud 1
luckydev0515 IT Worker Fraud 1
ministar1126 IT Worker Fraud 1
miss0702 IT Worker Fraud 1
nicolas-95 IT Worker Fraud 1
olderdev1003 IT Worker Fraud 1
olderdev523 IT Worker Fraud 1
ONLK IT Worker Fraud 1
Passion118 IT Worker Fraud Huy Diep 1
pauleta0126 IT Worker Fraud 1
peterjiro IT Worker Fraud 1
phoenix10221004 IT Worker Fraud 1
playbody_skype IT Worker Fraud Manric Vilegas 1
prince2115 IT Worker Fraud 1
prodev1991715 IT Worker Fraud 1
ptc-bink IT Worker Fraud 1
ptcbink IT Worker Fraud 1
sakele1026 IT Worker Fraud 1
sergey0142 IT Worker Fraud 1
shinystar-0314 IT Worker Fraud 1
softvoyager IT Worker Fraud 1
solution888 IT Worker Fraud 1
ssguardheaker IT Worker Fraud 1
stenor0515 IT Worker Fraud 1
talenteddev36428 IT Worker Fraud 1
techtrust0x0 IT Worker Fraud 1
techtruth1 IT Worker Fraud 1
topcoderben IT Worker Fraud 1
topdev707 IT Worker Fraud 1
trust0212 IT Worker Fraud 1
trust0212-fantohm IT Worker Fraud 1
trust023 IT Worker Fraud 1
trustme000777 IT Worker Fraud 1
vitaliy-egorov IT Worker Fraud 1
wangjin0102 IT Worker Fraud 1
whimsyrover IT Worker Fraud 1
xfika IT Worker Fraud 1
yucob IT Worker Fraud 1
Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Compromised packages and repositories name victims. See the sourcing methodology.