← Remote Workers

ddpuppy42@yahoo.com

ddpuppy42@yahoo.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-08-30 and the most recent 2026-10-18.

email address IT Worker Fraud MATCHED IN SOURCE

Listed under ChienHui Lee, Gary Lee.

First seen 2026-08-30 · last seen 2026-10-18

Sources

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/gary-lee — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “ChienHui Lee / Gary Lee / Light Fury / Leech Developer / lightfury / light-fury / leech.developer / leech_dev” · pulled 2026-09-09

• …medium.com/@leech.developer - linkedin.com/in/lee-chien-hui-50b157157/ - leech.developer@gmail.com - ddpuppy42@yahoo.com - 0xfcd4e8c84afd221d3b8c9c8c374a7784b314d230 (T) - 0x390ed16a3e85758597db7452998d3ea66b65fd84 -…

  DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Gary Lee / ChienHui Lee / Light Fury / Leech Developer” · published 2025-06-19 · pulled 2026-08-30

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Same persona record: ChienHui Lee

Other identifiers the reporting files under the same persona; 4 of 13 are shown.

• ChienHui Lee alias
• https://github.com/light-fury GitHub account
• https://www.linkedin.com/in/lee-chien-hui-50b157157/ LinkedIn account
• 0x4ab0eac00d1a5b05e7a484f8678dce68b849545a cryptocurrency wallet address

All 13 on the ChienHui Lee page

Same persona record: Gary Lee

Other identifiers the reporting files under the same persona; 4 of 12 are shown.

• Gary Lee alias
• lightfury.eth ENS name
• https://gitlab.com/leech_dev GitLab account
• https://medium.com/@leech.developer Medium account

All 12 on the Gary Lee page

Cited by the same report: lazarus.group/team/gary-lee

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 13 other indicators in this source. 3 are shown, chosen across types.

• leechdeveloper@gmail.com email address
• 0xe8a06462628b49eb70dbf114ea510eb3bbbdf559 cryptocurrency wallet address
• https://x.com/lee_chienhui X account

All 14 indicators from this source

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 1 are shown, chosen across types.

• https://calendly.com/zerobit417 Calendly account

All 855 indicators from this source