`https://github.com/crazydream000`

https://github.com/crazydream000 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from bbsz (@blackbigswan) and ketman.org. The report is dated 2025-04-01.

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-09-30

Listed as crazydream000

First seen 2025-04-01 · last seen 2025-04-01

removed checked 2026-09-30

Sources

The report reads commit metadata in which the GitHub user id 126175765 appears under three logins, CrazyDream000, Dima0dev and mooney0129: one account renamed twice. All three logins are now removed.
www.ketman.org/one-north-korean-four-north-koreans.html — bbsz (@blackbigswan) · under “CrazyDream000 and its renames (Ketman)” · published 2025-04-01 · pulled 2026-09-29
Nearby text:

…Protocol’s development include: https://github.com/SonataM (The front-end developer and inital tester/deployer for Aqua Protocol) https://github.com/CrazyDream000 (Alternative persona of SonataM ) https://github.com/jewelas (Account connected to CrazyDream000 through common contributions) Each…
From One North Korean To Four North Koreans To Five Threats - Ketman - Threat intelligence for remote and open source organizations — ketman.org · under “Aqua Protocol IT Workers” · published 2025-04-01 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: www.ketman.org/one-north-korean-four-north-koreans.html

bbsz (@blackbigswan) lists 52 other indicators in this source. 12 are shown, chosen across types.

All 53 indicators from this source