https://github.com/dreamboat999
https://github.com/dreamboat999 is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer).
The report is dated 2026-04-17.
The reporting files it under the persona dreamboat999, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
A fourteen-post thread on the accounts that worked on Tokamak Network's bridge front end, marketplace and subgraph between November 2023 and February 2025, read as a single cell from the primary account's following list, commit-email forensics, renamed and deleted handles, and account-creation dates clustered within days of each other. Every value here is stated in the thread; post thirteen is the researcher's own address map for the cell. In the address map with the alias IrisWx; post nine records the account created on 6 March 2022, the first of the March batch.
x.com/meow_mfer/status/2045107378249720221 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.
Account analysis
| Account created | 2022-03-06 |
|---|---|
| Repositories | 24 original, 9 forked |
| History older than the account | 12 repositories: ddu-ui-ff (first commit 2022-02-18), desigin-resources-for-developers (first commit 2021-05-06), ECourse-Dashboard (first commit 2020-12-01), electron-course (first commit 2020-05-08), MealPlanner (first commit 2021-01-08) |
| Commits copied into others' repositories | 0 |
| Commit identities | 2 addresses, 4 names; up to 3 names on one address; up to 2 addresses under one name |