https://github.com/bryan6738
https://github.com/bryan6738 is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-05-17.
github profile IT Worker Fraud RESEARCHER POST removed
removed
Source
-
The post says the operator's associates signed a guestbook on his GitHub profile and that the entries link to their profiles. The three names are transcribed by hand from the attached screenshot of that guestbook, where each is rendered as a link beside a GitHub-style identicon. The researcher characterises them as associates of the Lovely Developer operator but does not attribute any of them to a named person, so they anchor no persona here. The address softangel0090@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
x.com/browsercookies/status/1923540150686187802 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.