Chollima Hunter

← Remote Workers

https://github.com/commithero111

https://github.com/commithero111 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Narcass3 (@Narcass3). The report is dated 2025-07-05.

The reporting files it under the persona Roman Savchuk, alongside 9 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST removed checked 2026-09-02

First seen 2025-07-05 · last seen 2025-07-05

Source

  • The post gives the two GitHub accounts together as "tortuc/commithero111" and names the operator under both a Ukrainian-presenting first identity and a second one. It also links profiles on two European freelancing and business networks.
    x.com/Narcass3/status/1941540495966236785 — Narcass3 (@Narcass3) · under “Roman Savchuk / Mykhailo Romaniuk” · published 2025-07-05 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: Roman Savchuk

Other identifiers the reporting files under the same persona; 8 of 9 are shown.

All 9 on the Roman Savchuk page

Cited by the same report: x.com/Narcass3/status/1941540495966236785

Narcass3 (@Narcass3) lists 6 other indicators in this source. 1 are shown, chosen across types.

All 7 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.