`https://github.com/ncao9127`

https://github.com/ncao9127 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-08-30 and the most recent 2026-10-18.

github profile IT Worker Fraud MATCHED IN SOURCE live checked 2026-08-30

Listed as ncao9127

First seen 2026-08-30 · last seen 2026-10-18

live checked 2026-08-30

The image is the avatar this account displays, not evidence of who operates it.

Source

…![](./wdev733-cydn95.jpg) #### Nathan Cao / James Lee - Claimed Singapore - rango527 - ncao9127 - github.com/rango527 - github.com/ncao9127 - +65 9073 3165 - https://rango527.github.io/ - https://weedoverse.gitbook.io/weedoverse-rolling-paper-v3.0/team -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Nathan Cao / James Lee” · published 2025-06-19 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 12 are shown, chosen across types.

All 855 indicators from this source