https://fiverr.com/benjamin_core

https://fiverr.com/benjamin_core is a Fiverr account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Sasha Ingber (Substack). The report is dated 2025-01-26.

fiverr account IT Worker Fraud RESEARCHER POST

First seen 2025-01-26 · last seen 2025-01-26

Source

  • The report of 26 January 2025 follows a researcher who answered a remote-work offer and was drawn into hosting laptops for North Korean IT workers; the first contact came from the Fiverr user Benjamin_Core, one of the two operators the researcher called "the Bens". The report names no other account.
    sashaingber.substack.com/p/the-23-year-old-who-infiltrated-a — Sasha Ingber (Substack) · under “Fiverr contact in a laptop-farm recruitment (Sasha Ingber)” · published 2025-01-26 · pulled 2026-09-28

Find this indicator in the index, or see every Fiverr account this site holds under Fiverr accounts in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.