`https://github.com/tech-master823`

https://github.com/tech-master823 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from DPRK_Dev_Star (@DPRK_Dev_Star). The report is dated 2025-11-01.

The reporting files it under the persona Kauai Santana, alongside 5 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-30

First seen 2025-11-01 · last seen 2025-11-01

live checked 2026-09-30

The image is the avatar this account displays, not evidence of who operates it.

Source

Surfaced by the DPRK_Dev_Star account, an anonymous parody/expose account that narrates in an operator voice to out DPRK developer personas; it is followed by the named researchers this file otherwise draws on. The post pairs the Vercel portfolio kauai-site.vercel.app with the GitHub account github.com/tech-master823, and the two corroborate independently: the GitHub account, created September 2024 with 32 repositories, carries the display name Kauai Santana and the same senior-full-stack-developer framing as the site, and the site's own Github Profile button points to it. Recorded as the account's claim, with that corroboration noted; the source is weaker than the named-researcher dossiers, which is why the cross-check is stated. The GitHub account links the LinkedIn profile kauai-santana-dev and its commit history is dominated by carlsh0823@gmail.com (311 commits across its own repositories), the operator's own author address; both are added. Forked-repo commits carry unrelated upstream authors, which are not.
x.com/DPRK_Dev_Star/status/1984585764886208977 — DPRK_Dev_Star (@DPRK_Dev_Star) · under “Kauai Santana / Kauai Martins Santana / tech-master823” · published 2025-11-01 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created	2024-09-12
Repositories	32 original, 0 forked
History older than the account	19 repositories: `.net-maui-chat-app-challenge` (first commit 2022-01-09), `AI-Image-Generator` (first commit 2022-09-01), `AI-voice-assistant` (first commit 2024-03-29), `aspdotnet-vuejs` (first commit 2019-04-01), `BookStore` (first commit 2023-04-03)
Commits copied into others' repositories	0
Commit identities	3 addresses, 5 names; up to 5 names on one address; up to 2 addresses under one name

Commit addresses this index holds

Follows these indexed accounts

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-11. 2 other commit addresses are held for review rather than listed. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Same persona record: Kauai Santana

Other identifiers the reporting files under the same persona; 4 of 5 are shown.

All 5 on the Kauai Santana page

Cited by the same report: x.com/DPRK_Dev_Star/status/1984585764886208977

DPRK_Dev_Star (@DPRK_Dev_Star) lists 5 other indicators in this source. 1 are shown, chosen across types.

All 6 indicators from this source