https://fiverr.com/benjamin_core
https://fiverr.com/benjamin_core is a Fiverr account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Sasha Ingber (Substack).
The report is dated 2025-01-26.
fiverr account IT Worker Fraud RESEARCHER POST
Source
-
The report of 26 January 2025 follows a researcher who answered a remote-work offer and was drawn into hosting laptops for North Korean IT workers; the first contact came from the Fiverr user Benjamin_Core, one of the two operators the researcher called "the Bens". The report names no other account.
sashaingber.substack.com/p/the-23-year-old-who-infiltrated-a — Sasha Ingber (Substack)
Find this indicator in the index, or see every Fiverr account this site holds under Fiverr accounts in the browse listing.