https://github.com/cryptocore1001

https://github.com/cryptocore1001 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-08-01.

github profile IT Worker Fraud RESEARCHER POST removed checked 2026-09-30

First seen 2025-08-01 · last seen 2025-08-01

Source

  • The post publishes the following list of the kstar0102 persona, which this repository already documents, and reads the list itself as the finding: in the researcher's words it is thick with North Korean flags. These five accounts are carried as a group rather than as personas because that is the level the claim is made at -- the researcher asserts the company the account keeps, not an identity for each member of it. Two names on the same screenshot are deliberately absent. Oleksii Taranenko has an entry of his own here from other posts, and the remaining account belongs to a publicly known developer in Tokyo with an ordinary professional presence, who appears in the list for the same reason these personas follow any real engineer, and who is recorded in the held-back list so a later pass over this screenshot does not sweep him in.
    x.com/browsercookies/status/1951110041047855169 — Cookie Connoisseur (@browsercookies) · under “GitHub accounts the kstar0102 persona follows” · published 2025-08-01 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: x.com/browsercookies/status/1951110041047855169

Cookie Connoisseur (@browsercookies) lists 6 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.