`williamharris0214@gmail.com`

williamharris0214@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kawaii Jong UwUn (@KawaiiJongUwUn) and Chollima Hunter. The reports are dated 2025-08-09.

The reporting files it under the persona William Harris, alongside 23 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

email address IT Worker Fraud CURATED

First seen 2025-08-09 · last seen 2025-08-09

Sources

Two persona names sharing one Telegram handle, silvani777, and one LinkedIn slug, with a Skype id and a phone number given for each; the chart links the identity to Liu Jian Hua and, with a question mark, to an ungrouped GitHub account silvani214 as possibly the same Silvani. Transcribed from the researcher's chart, which groups every account under the name it gives here and draws its links from mutual follows, shared contact details and repositories carrying one another's details. The chart also gives Discord handle santiagourregobotero_61780, for which this site has no extractor. Accounts on platforms this site does not index, as the chart lists them: stackoverflow.com/users/20988762/william-harris, cake.me/me/santiago-urrego-botero?locale=fr, stackoverflow.com/users/22406929/santiagourregobotero, rocketreach.co/santiago-urrego-botero-email_724489933, awstip.com/overlay-with-own-url-in-react-b579286f5db4.
github.com/Kawaii-Jong-UWUn/ITW-Cluster-Research/tree/main/EliteCoder — Kawaii Jong UwUn (@KawaiiJongUwUn) · under “William Harris / Santiago Urrego Botero” · published 2025-08-09 · pulled 2026-08-30
Found on 12 September 2026 by searching the open web for the account handles this site already holds for this operator, and read directly from the page cited. A portfolio site the operator publishes under its own GitHub Pages account, presenting as WILLIAM HARRIS with "10 years of experience of software development and technical writing" and a skills wall running from Solidity to TensorFlow. Its contact block is the useful part, because it gathers in one place identifiers this site held separately and adds two it did not: the address williamharris0214@gmail.com, a second Skype identifier live:.cid.456097f8358a684a, a WhatsApp link and a tel: link both to +1 646 480 0703, a Telegram link to t.me/silvani777, a Discord invite discord.gg/jRrTSsND, a StackOverflow account at stackoverflow.com/users/20988762/william-harris, and — under a page headed William Harris — a LinkedIn link to linkedin.com/in/santiagourregobotero/. The site naming one identity while linking another’s LinkedIn is the page’s own doing, not an inference drawn here. The Discord invite and the StackOverflow account are recorded in this note rather than as indicators of their own: neither has a type in this index, and an invite code is a door rather than an identifier. The second portfolio, portfolio-santiagourregobotero.vercel.app, was read the same day and is the same site with a different person in it. Identical template, identical skills wall down to a duplicated entry for Dart, and a contact block built the same way — but headed SANTIAGO URREGO BOTERO, claiming "over seven years of commercial experience" against the other page’s ten, and a National University of Singapore degree dated 2014 to 2018 against the same university dated 2009 to 2014. What ties the two pages is not the template but the contact details they share: the same Telegram account, t.me/silvani777, and the same Discord invite, discord.gg/jRrTSsND. Each page also carries its own StackOverflow account, its own Gmail address, its own GitHub, and its own Skype identifier, which this site reads as one operator maintaining two complete CVs rather than one identity drifting; that is an inference drawn here, and nothing on either page states it. It also settles a loose end. The telephone number this index holds as +1753362648 is nine subscriber digits where a North American number needs ten, and it was transcribed from a researcher’s chart; this page publishes it twice itself, as tel:+1753362648 and as wa.me/1753362648, so the malformed number is the operator’s own and not a transcription error.
williamharris0214.github.io/ https://williamharris0214.github.io/ not linked — Chollima Hunter · under “William Harris” · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Same persona record: William Harris

Other identifiers the reporting files under the same persona; 8 of 23 are shown.

All 23 on the William Harris page

Cited by the same report: github.com/Kawaii-Jong-UWUn/ITW-Cluster-Research/tree/main/EliteCoder

Kawaii Jong UwUn (@KawaiiJongUwUn) lists 97 other indicators in this source. 3 are shown, chosen across types.

All 98 indicators from this source

Cited by the same report: williamharris0214.github.io/

Chollima Hunter lists 4 other indicators in this source https://williamharris0214.github.io/ not linked. 1 are shown, chosen across types.

All 5 indicators from this source