`https://github.com/neo23x0`

https://github.com/neo23x0 is a GitHub account that 2 published sources report in connection with Lazarus Group and unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from Volexity and Huntress. The reports are dated 2023-03-30.

github profile Lazarus GroupDPRK (cluster unattributed) MATCHED IN SOURCE live checked 2026-09-18

Listed as neo23x0

First seen 2023-03-30 · last seen 2023-03-30

live checked 2026-09-18

The image is the avatar this account displays, not evidence of who operates it.

Sources

Nearby text:

…Social Media Posts https://twitter.com/cyb3rops/status/1641130326830333984 ( https://github.com/SigmaHQ/sigma/pull/4151/files , https://github.com/Neo23x0/signature-base/blob/master/yara/gen_mal_3cx_compromise_mar23.yar ) https://twitter.com/cyb3rops/status/1641339448053858304 https://twitter.com/patrickwardle/status/1641294247877021696…
3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity — Volexity · under “Appendix A – Third-Party Reporting” · published 2023-03-30 · pulled 2026-09-11
…Nextron System’s Sigma and YARA rules for detection https://github.com/Neo23x0/signature-base/blob/master/yara/gen_mal_3cx_compromise_mar23.yar Unofficial OTX AlientVault Pulse https://otx.alienvault.com/pulse/64249206b02aa3531a78d020 Kevin Beaumont’s commentary…
3CX VoIP Software Compromise & Supply Chain Threats | Huntress — Huntress · under “Resources and References” · published 2023-03-30 · pulled 2026-09-11

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: 3CX Supply Chain Compromise Leads to ICONIC Incident | Volexity

Volexity lists 23 other indicators in this source. 7 are shown, chosen across types.

All 24 indicators from this source

Cited by the same report: 3CX VoIP Software Compromise & Supply Chain Threats | Huntress

Huntress lists 1 other indicator in this source.