Chollima Hunter

← Remote Workers

https://github.com/smirnovvvasyl

https://github.com/smirnovvvasyl is a GitHub account that 2 published sources report in connection with IT Worker Fraud and Moonstone Sleet activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research) and Chollima Group. The earliest of those reports is dated 2025-08-25 and the most recent 2026-10-18.

github profile IT Worker FraudMoonstone Sleet MATCHED IN SOURCE removed checked 2026-08-30

Listed as smirnovvvasyl

First seen 2025-08-25 · last seen 2026-10-18

Sources

  • …johnwilliam199024@gmail.com - github.com/loganworld - github.com/logan-smith-cloud - github.com/jeevan8888 - github.com/smirnovvvasyl - t.me/defiworld_dev (ID: 5157722477) • ([Messages](./user-5157722477-@defiworld_dev.txt)) - t.me/loganworld - t.me/logan_lee_c -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “loganworld / Logan Lee / Logan King / Logan Smith” · published 2025-06-19 · pulled 2026-08-30
  • …om rgrobertclark032@gmail.com johnwilliam199024@gmail.com Github: github.com/loganworld github.com/logan-smith-cloud github.com/jeevan8888 github.com/smirnovvvasyl Telegram: defiworld_dev loganworld logan_lee_c Personas: Logan Lee Logan King Logan Smith Vasyl Smirnov Ethan Chan Leon Zhang Evgeny…
    Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group — Chollima Group · under “IOCs.” · published 2025-08-25 · pulled 2026-10-18

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 7 are shown, chosen across types.

All 855 indicators from this source

Cited by the same report: Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group

Chollima Group lists 109 other indicators in this source. 5 are shown, chosen across types.

All 110 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.