`https://github.com/golden0x`

https://github.com/golden0x is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Hunter. The report is dated 2026-09-24.

github profile IT Worker Fraud CURATED live checked 2026-09-30

First seen 2026-09-24 · last seen 2026-09-24

live checked 2026-09-30

The image is the avatar this account displays, not evidence of who operates it.

Source

Found on 24 September 2026 by searching GitHub's commit index for published persona addresses and reading which account GitHub attributes the commits to. GitHub credits a commit to the account that has the signing address registered and verified, which only the holder of the mailbox can do, so an attributed account is one the address's holder controls, whichever repository the commits sit in and whenever the address was added. Counts are of the commits GitHub's search returns, up to 100. GitHub attributes 100 commits signed mitsurukudo213@gmail.com, an address browsercookies listed under the heading Unattrib in a post about Steven Leal, without tying it to that persona, to github.com/golden0x, account id 226656211, created on 15 August 2025, display name Golden Ox, with 3 public repositories.
github.com/golden0x — Chollima Hunter · under “A GitHub account holding an address browsercookies listed as Unattrib beside Steven Leal” · pulled 2026-09-24

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: github.com/golden0x

Chollima Hunter lists 1 other indicator in this source.