https://github.com/elbaable
https://github.com/elbaable is a GitHub account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-04-19.
The reporting files it under the persona Kenichi Yamamoto, alongside 4 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
The GitHub account is read by hand from the second attached screenshot, a profile page headed elbaable with 24 repositories and 94 followers. The post's own text states both names and adds that the operator likes the number 1026 on email accounts; no address is shown, so none is recorded here. This is one of the names docs/x-source-backlog.md had been carrying as unresolved on the belief that it existed only inside an image. It is in the post's text, in a window the sweep never reached.
x.com/browsercookies/status/1913723984304324686 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.
Account analysis
| Account created | 2021-10-21 |
|---|---|
| Repositories | 16 original, 8 forked |
| History older than the account | 0 repositories |
| Commits copied into others' repositories | 0 |
| Commit identities | 2 addresses, 3 names; up to 2 names on one address; up to 3 addresses under one name |
Commit addresses this index holds
Followed by these indexed accounts
Related indicators
Same persona record: Kenichi Yamamoto
All 4 on the Kenichi Yamamoto page