← Remote Workers

https://github.com/joun-099910

https://github.com/joun-099910 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-07-23.

The reporting files it under the persona Zhoe Ja Ryong, alongside 4 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST removed checked 2026-09-02

First seen 2025-07-23 · last seen 2025-07-23

Source

• The post separately names github.com/NeonNexus0408 as the account this persona copied its portfolio site from, and characterizes that account as DPRK. It is recorded here as a related account, not as this persona's own.

  x.com/browsercookies/status/1947837619876045019 — Cookie Connoisseur (@browsercookies) · under “Zhoe Ja Ryong / joun-099910” · published 2025-07-23 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: Zhoe Ja Ryong

Other identifiers the reporting files under the same persona.

• Zhoe Ja Ryong alias
• joun3910@gmail.com email address
• https://github.com/kai-dev777 GitHub account
• https://gitlab.com/joun3910 GitLab account

Cited by the same report: x.com/browsercookies/status/1947837619876045019

Cookie Connoisseur (@browsercookies) lists 3 other indicators in this source. 1 are shown, chosen across types.

• https://github.com/neonnexus0408 GitHub account

All 4 indicators from this source