https://github.com/cobang

https://github.com/cobang is a GitHub account that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group) and tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-08-30 and the most recent 2026-10-18.

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as cobang

Listed under Daiki Saito, Anthony Keller.

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09
  • Nearby text:

    …coppn - lcoppn - 0x.bejaxer - eratos1123 - eratos1122 - cobang - bejaxer - 0x.bejaxer@gmail.com - eratos1123@gmail.com - github.com/cobang - github.com/bejaxer (Name: 0x A.K.) • [Archive](https://web.archive.org/web/20221130173129/https://github.com/bejaxer) - t.me/lcoppn…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: Daiki Saito

Other identifiers the reporting files under the same persona; 4 of 20 are shown.

All 20 on the Daiki Saito page

Same persona record: Anthony Keller

Other identifiers the reporting files under the same persona; 4 of 6 are shown.

All 6 on the Anthony Keller page

Cited by the same report: lazarus.group/team/daiki-saito

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 13 other indicators in this source. 3 are shown, chosen across types.

All 14 indicators from this source

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 1 are shown, chosen across types.

All 855 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.