https://github.com/master-0420
https://github.com/master-0420 is a GitHub account
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer).
The report is dated 2026-05-18.
The reporting files it under the persona master-0420, alongside 1 other identifier attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
github profile Contagious Interview RESEARCHER POST live
live
Source
-
Drawn from "Deep Dive into Active Github Network Running Contagious Interview", an article the researcher published on X in May 2026 covering an investigation running since mid-2025. The article names the same operation under the labels several vendors give it, Contagious Interview and PolinRider and UNC5342 among them, and describes an infection chain that begins with a repository sent during a fake interview and executes when the developer opens the folder in VS Code or Cursor. This operator runs a complete fake interview assessment platform. The domain impersonates a real hiring-assessment product, and the article describes further variants impersonating a second one. During the assessment the candidate is shown a fake camera-driver installation with a progress indicator; no driver is installed and the step exists to cover the malware running behind it.
x.com/meow_mfer/status/2056238427449004537 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.
Account analysis
| Account created | 2026-02-26 |
|---|---|
| Repositories | 16 original, 0 forked |
| History older than the account | 0 repositories |
| Commits copied into others' repositories | 0 |
| Commit identities | 0 addresses, 0 names |