https://github.com/oleksiibohatyrenko

https://github.com/oleksiibohatyrenko is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-07-24.

The reporting files it under the persona Kim Thae Gwang, alongside 6 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST removed checked 2026-09-30

First seen 2025-07-24 · last seen 2025-07-24

Source

  • Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The table writes the name without spaces, as KimThaeGwang, and annotates the third alias "claims Ukrainian" -- that is the researcher describing a nationality the persona asserts, not a statement about a real Ukrainian of that name.
    x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies) · under “Kim Thae Gwang / Araki Sato / James Ybarra / Oleksii Bohatyrenko” · published 2025-07-24 · pulled 2026-09-16

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: Kim Thae Gwang

Other identifiers the reporting files under the same persona.

Cited by the same report: x.com/browsercookies/status/1948426426145005680

Cookie Connoisseur (@browsercookies) lists 28 other indicators in this source. 6 are shown, chosen across types.

All 29 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.