https://github.com/oleksii9999

https://github.com/oleksii9999 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-08-01.

The reporting files it under the persona Oleksii Taranenko, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-02

First seen 2025-08-01 · last seen 2025-08-01

Source

  • Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The screenshot shows the display name Oleksii Taranenko over the GitHub handle Oleksii9999, a bio reading "I thrive on building interactive bots that enhance user experiences and streamline processes.", a stated location of Dnipro, Ukraine, 3 followers against 2 following, and a linked website of kaize3.com. The second cited post names this account and identifies kstar0102 as one of its followers.
    x.com/browsercookies/status/1951108033427460326 — Cookie Connoisseur (@browsercookies) · under “Oleksii Taranenko / Oleksii9999” · published 2025-08-01 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created2024-09-17
Repositories13 original, 0 forked
History older than the account6 repositories: Oleksii9999/Solana-Trading-Bot (first commit 2024-01-03), Oleksii9999/AvitrageBot-Tradingbot (first commit 2022-01-24), Oleksii9999/AI-Chatbot (first commit 2017-11-21), Oleksii9999/pump.fun (first commit 2024-06-23), Oleksii9999/telegram-miniapp-game (first commit 2024-06-03)
Commits copied into others' repositories0
Commit identities1 address, 2 names; up to 2 names on one address
Name then four digitsoleksii9999

Commit addresses this index holds

Follows these indexed accounts

Followed by these indexed accounts

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-07. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Same persona record: Oleksii Taranenko

Other identifiers the reporting files under the same persona.

Cited by the same report: x.com/browsercookies/status/1951108033427460326

Cookie Connoisseur (@browsercookies) lists 5 other indicators in this source. 3 are shown, chosen across types.

All 6 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.