`https://github.com/defich`

https://github.com/defich is a GitHub account that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist. The report is dated 2022-03-31.

github profile Lazarus Group MATCHED IN SOURCE live checked 2026-09-18

Listed as defich

First seen 2022-03-31 · last seen 2022-03-31

live checked 2026-09-18

The image is the avatar this account displays, not evidence of who operates it.

Source

…backdoor Exfiltration T1041 Exfiltration Over C2 Channel Exfiltrates gathered data over C2 channels with backdoor [1] https://github.com/DeFiCh/app [2] APT Intel report: Lazarus Covet Covid19 Related Intelligence Malware Technologies Google Chrome Trojan…
Lazarus Trojanized DeFi app for delivering malware | Securelist — Kaspersky Securelist · under “MITRE ATT&CK Mapping” · published 2022-03-31 · pulled 2026-09-12

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created	2019-11-27
Repositories	32 original, 10 forked
History older than the account	0 repositories
Commits copied into others' repositories	0
Commit identities	0 addresses, 0 names

Followed by these indexed accounts

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-11-06. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.