`https://github.com/blink-dev-hub`

https://github.com/blink-dev-hub is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-07-24.

The reporting files it under the persona Jo Hyon Ho, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-02

First seen 2025-07-24 · last seen 2025-07-24

live checked 2026-09-02

Source

x.com/browsercookies/status/1948427372744900758 — Cookie Connoisseur (@browsercookies) · under “Jo Hyon Ho” · published 2025-07-24 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created	2025-05-20
Repositories	17 original, 0 forked
History older than the account	2 repositories: `coffee-delivery` (first commit 2022-08-07), `nike` (first commit 2023-09-03)
Commits copied into others' repositories	0
Commit identities	1 address, 1 name

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-01. 1 other commit address is held for review rather than listed. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Same persona record: Jo Hyon Ho

Other identifiers the reporting files under the same persona.

Cited by the same report: x.com/browsercookies/status/1948427372744900758

Cookie Connoisseur (@browsercookies) lists 8 other indicators in this source. 6 are shown, chosen across types.

All 9 indicators from this source