← Remote Workers

https://github.com/thepinion

https://github.com/thepinion is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from bbsz (@blackbigswan). The report is dated 2025-04-04.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-30

First seen 2025-04-04 · last seen 2025-04-04

live checked 2026-09-30

The image is the avatar this account displays, not evidence of who operates it.

Source

• The report lists EmilLa1, RomanHarazha and ThePinion, all created on 25 October 2022 within hours of one another, as high-confidence DPRK IT-worker accounts connected to a Nisos disclosure, and notes that EmiLa1 and jocadefichain used profile pictures out of the usual pattern. EmiLa1 and EmilLa1 are separate accounts; the report names both.

  www.ketman.org/russia-dprk-soft-connection.html — bbsz (@blackbigswan) · under “Nisos-linked accounts with Russian military imagery (Ketman)” · published 2025-04-04 · pulled 2026-09-29

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: www.ketman.org/russia-dprk-soft-connection.html

bbsz (@blackbigswan) lists 11 other indicators in this source.

• https://github.com/belbazanas GitHub account
• https://github.com/cristttt GitHub account
• https://github.com/eddieda1 GitHub account
• https://github.com/emila1 GitHub account
• https://github.com/emilla1 GitHub account
• https://github.com/girlbuzz GitHub account
• https://github.com/itayplav GitHub account
• https://github.com/jocadefichain GitHub account
• https://github.com/romanharazha GitHub account
• https://github.com/seanjones11 GitHub account
• https://github.com/shanelka-here GitHub account