https://github.com/kryptify
https://github.com/kryptify is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Narcass3 (@Narcass3).
The report is dated 2025-05-12.
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
The first post is a bare list published under the word "btwz" with no operator named. The second post, from the same day, addresses the X accounts jeremymichael79 and Hakeohiratani directly and asks how Pyongyang is, which is the researcher treating both handles as DPRK operators. The two handles are recorded here on that basis. The list itself is still not split between them, because the posts do not say which account holds which identifier, and dividing it would be this site's inference rather than the researcher's. The first post also gives a web3.career handle, which has no indicator type in this repository. The address alexandersimmons824@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author. The address audithunter821@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
x.com/Narcass3/status/1921805220478149068 — Narcass3 (@Narcass3)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.