https://github.com/attractivedev
https://github.com/attractivedev is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer).
The report is dated 2025-06-02.
The reporting files it under the persona James Abram Miller, alongside 13 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
Posted as a reply to browsercookies, listing four names the operator uses alongside two addresses, a telephone number and three links. The portfolio site is deployed under a Vercel account named ares-dev, which is the same account name browsercookies documents separately as ares-dev05; the two posts are independent, and this site records the link as the coincidence of naming that it is rather than merging the identities on it. The post also links a LinkedIn account, which was checked and found to belong to a real and unconnected person; it is recorded in the held-back list rather than here.
x.com/meow_mfer/status/1929662248722878563 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.
Account analysis
| Account created | 2022-05-21 |
|---|---|
| Repositories | 48 original, 3 forked |
| History older than the account | 0 repositories |
| Commits copied into others' repositories | 0 |
| Commit identities | 1 address, 3 names; up to 2 names on one address |
Commit addresses this index holds
Follows these indexed accounts
Followed by these indexed accounts
Related indicators
Same persona record: James Abram Miller
All 13 on the James Abram Miller page