`https://github.com/naruhitokaide`

https://github.com/naruhitokaide is a GitHub account that 4 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research), The Raven File and Group-IB. The earliest of those reports is dated 2025-08-28 and the most recent 2026-10-18.

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as naruhitokaide

First seen 2025-08-28 · last seen 2026-10-18

removed checked 2026-08-30

Sources

…github.com/goldenpig951204 - github.com/green25dev - github.com/incredigroup - github.com/mhcatty - github.com/mhcrocky - github.com/naruhitokaide - github.com/Redmon540 - github.com/sp0t - github.com/TOP-DEVELOPER - github.com/twizard410 - github.com/webstar1014 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Insights from Internal DPRK Chat Logs” · published 2025-06-19 · pulled 2026-08-30
Nearby text:

…es888 https://github.com/jayevans-star https://github.com/kanbei0605 https://github.com/KeepGrowingHere https://gist.github.com/kevin921115 https://github.com/naruhitokaide https://github.com/lprfacial247 https://github.com/melodyxpot https://github.com/mikoalas0414 https://github.com/miracleweb9000 https://git…
DPRK IT WORKERS UNVEILED – THE RAVEN FILE — The Raven File · under “GITHUB ACCOUNTS OF DPRK IT WORKERS AKA JASPER SLEET” · published 2025-08-28 · pulled 2026-08-30
Nearby text:

…m/hermes1108 https://github.com/Lyappunov https://github.com/masculus https://github.com/metacoffee0x17 https://github.com/mr-new-0509 https://github.com/naruhitokaide https://github.com/OlekSytn https://github.com/pioneer830 https://github.com/sharkxhunter/ https://github.com/Shiny0805/ https://githu…
Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog — Group-IB · under “GitHub Indicators” · published 2026-04-08 · pulled 2026-08-30
Nearby text:

…es888 https://github.com/jayevans-star https://github.com/kanbei0605 https://github.com/KeepGrowingHere https://gist.github.com/kevin921115 https://github.com/naruhitokaide https://github.com/lprfacial247 https://github.com/melodyxpot https://github.com/mikoalas0414 https://github.com/miracleweb9000 https://git…
DPRK GitHub Accounts — The Raven File · published 2025-08-31 · pulled 2026-09-18

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 5 are shown, chosen across types.

All 855 indicators from this source

Cited by the same report: DPRK IT WORKERS UNVEILED – THE RAVEN FILE

The Raven File lists 78 other indicators in this source. 4 are shown, chosen across types.

All 79 indicators from this source

Cited by the same report: Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog

Group-IB lists 105 other indicators in this source. 3 are shown, chosen across types.

All 106 indicators from this source