https://github.com/hot214

https://github.com/hot214 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Hunter. The report is dated 2026-09-20.

The reporting files it under the persona William Harris, alongside 23 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

github profile IT Worker Fraud CURATED live checked 2026-09-30

First seen 2026-09-20 · last seen 2026-09-20

Source

  • Read on 20 September 2026 by tallying which GitHub logins have authored commits in the repositories of github.com/williamharris0214, an account already held under this persona. hot214 has authored six of them. It was registered on 12 April 2023, three months after williamharris0214, holds five public repositories, displays the name Silvani, and publishes hot214.dev@gmail.com on its profile, an address this index did not hold. It has no followers and follows two accounts. The handle shares the digits 214 with the account whose repositories it commits in; that is a coincidence of naming, while the address is a value the account states about itself. Two further logins commit in the same repositories, sky-hugger and ddriverdev999, and are recorded nowhere here because nothing beyond the shared repository connects them.
    github.com/hot214 — Chollima Hunter · under “William Harris” · pulled 2026-09-20

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Account analysis

Account created2023-04-12
Repositories3 original, 2 forked
History older than the account0 repositories
Commits copied into others' repositories0
Commit identities1 address, 1 name

From gh-fake-analyzer 1.0.2, the Ketman Project's GitHub analysis tool, run on 2026-10-04. 1 other commit address is held for review rather than listed. These are signals: backdated history and several commit identities are common among ordinary developers too, and an account that shows none of them is not thereby cleared.

Related indicators

Same persona record: William Harris

Other identifiers the reporting files under the same persona; 8 of 23 are shown.

All 23 on the William Harris page

Cited by the same report: github.com/hot214

Chollima Hunter lists 1 other indicator in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.