`https://github.com/trader389`

https://github.com/trader389 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from NKInternet. The report is dated 2026-04-26.

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-09-18

Listed as trader389

First seen 2026-04-26 · last seen 2026-04-26

removed checked 2026-09-18

Source

…Additionally the user walletdiscover1010-a11y who is still associated with Mentonex is also following vexxloso . https://github.com/trader389 Looking at the job postings on nixsora.com reveals several posts looking to hire blockchain developers There’s also a community…
More Fake Devs, More Fake Companies: vexxloso and Nixsora.com | North Korean Internet — NKInternet · under “Pivoting Companies – A Wild Nixsora.com Is Discovered” · published 2026-04-26 · pulled 2026-09-09

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: More Fake Devs, More Fake Companies: vexxloso and Nixsora.com | North Korean Internet

NKInternet lists 3 other indicators in this source.