https://github.com/geektalent1010

https://github.com/geektalent1010 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Mees van Wickeren (Medium). The report is dated 2026-01-23.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-30

First seen 2026-01-23 · last seen 2026-01-23

Source

  • Transcribed by hand on 27 September 2026 from a post the scraper cannot read because Medium answers it with a bot check. The post walks a cluster of GitHub accounts that follow and star one another. It states that techlover9922, received from another researcher, was verified by the author as a North Korean fake profile; the rest it calls suspicious, and it says no malware delivery was found. Only four of the roughly thirty accounts it names are carried here: techlover9922 on the author's own verification, and geektalent1010, DevHawkNov and uniwaydev because their follow graphs, checked on 27 September 2026, connect them to accounts this site already indexes from other reporting (geektalent1010 follows kamaalsultan and supercomet329 and is followed by uniwaydev and bitcrusher1023; DevHawkNov is followed by forest410, popstar7 and thinkingdev9 and follows dreamsoft07). The others rest on the post's graph reasoning alone, several present as real developers, and one X account the post names is the person being impersonated, so they are not carried.
    medium.com/@meeswicky1100/the-web-of-north-korean-fake-profiles-3e04d8dcd1af — Mees van Wickeren (Medium) · under “GitHub follow-and-star cluster (Mees van Wickeren)” · published 2026-01-23 · pulled 2026-09-27

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: medium.com/@meeswicky1100/the-web-of-north-korean-fake-profiles-3e04d8dcd1af

Mees van Wickeren (Medium) lists 3 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.