https://github.com/mastercodercat
https://github.com/mastercodercat is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-04-21.
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
The post lists these under the heading Other GH mentioned, in a thread about a publicly readable Google Drive a suspected DPRK group left open, and ties none of them to a named operator. It marks mastercodercat as working in Web3 and cryptocurrency and adonis0907 as terminated. The address is written without a top-level domain, as adonis0907[@]gmail. The address mastercoderoy64@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author. The address olderdev1003@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
x.com/browsercookies/status/1914444004693098586 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.