https://github.com/imcode65
https://github.com/imcode65 is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Nisos.
The report is dated 2025-03-27.
github profile IT Worker Fraud RESEARCHER POST removed
Listed under John Alexander Bird, Ram Maharjan, Roman Kryveha.
removed
Sources
-
One of three personas Nisos reports were created in 2024 alongside Karl Chong and share its contact information. The report's text says this persona reused Karl Chong's about-me paragraph and stock photograph; its network map draws a direct line from the persona to the GitHub account kanbei0605 and a commit-derived line to imcode65. Both accounts are carried here as Nisos's attribution, and a line found on commits is a weaker tie than a direct one.
nisos.com/research/dprk-it-worker-scam-mitigation/ — Nisos -
One of three personas Nisos reports were created in 2024 alongside Karl Chong and share its contact information. The report's network map ties this persona to the GitHub accounts code-0605 and imcode65 through commits rather than through a direct connection, which is the weaker of the two ties the map draws; the text gives no further detail on this persona.
nisos.com/research/dprk-it-worker-scam-mitigation/ — Nisos -
Nisos reports that this persona's resume was created and updated in 2024 through the GitHub account imcode65, that the account is associated with the address kanbei0605@gmail.com also used by Karl Chong, and that the persona had no active personal website when the report was written, which Nisos reads as a persona not yet seeking employment. The network map ties it to imcode65 through commits.
nisos.com/research/dprk-it-worker-scam-mitigation/ — Nisos
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.