https://github.com/black02430horse
https://github.com/black02430horse is a GitHub account
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer) and tayvano (lazarus-bluenoroff-research).
The earliest of those reports is dated 2026-04-17 and the most recent 2026-10-18.
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as black02430horse
Listed under black02430horse, Victor Hazard.
removed
Sources
-
A fourteen-post thread on the accounts that worked on Tokamak Network's bridge front end, marketplace and subgraph between November 2023 and February 2025, read as a single cell from the primary account's following list, commit-email forensics, renamed and deleted handles, and account-creation dates clustered within days of each other. Every value here is stated in the thread; post thirteen is the researcher's own address map for the cell. The second operator on the bridge front end, August 2024 to February 2025, whose GitHub account has since been deleted; the commits remain under this address. Post four describes a tool this account built and ran that harvested pending-transaction data from the Titan chain. The thread notes the handle fits a naming pattern the researcher sees across other DPRK accounts.
x.com/meow_mfer/status/2045105256120693242 — meow mfer (@meow_mfer) -
…on Safe 0x0f4 #### Victor Hazard - vihazard430@gmail.com - hazardvictor@hotmail.com - linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor - happy3guy@gmail.com - victordev67@gmail.com - 0xefcb06b5ea58fb451c64ec278d957f4ebfd26df7 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.
Related indicators
Same persona record: black02430horse
All 3 on the black02430horse page