`https://github.com/light-fury`

https://github.com/light-fury is a GitHub account that 3 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from ZachXBT (@zachxbt), Lazarus Group DPRK IT-Worker Registry (lazarus.group) and tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2024-07-15 and the most recent 2026-10-18.

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as light-fury

Listed under ChienHui Lee, Gary Lee.

First seen 2024-07-15 · last seen 2026-10-18

removed checked 2026-08-30

Sources

The post states this operator transferred over $300,000 from a public ENS address to Kim Sang Man, who is named on the OFAC sanctions list. It gives 'Gary Lee' explicitly as a fake name.
x.com/zachxbt/status/1812856350151766209 — ZachXBT (@zachxbt) · under “Gary Lee / Light Fury / Light-Fury / lee_chienhui / leech_dev” · published 2024-07-15 · pulled 2026-08-30
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/gary-lee — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “ChienHui Lee / Gary Lee / Light Fury / Leech Developer / lightfury / light-fury / leech.developer / leech_dev” · pulled 2026-09-09
…$XGM, Fantom, Preon Finance, Sperax - Light Fury - lightfury - light-fury - leech.developer - leech_dev - x.com/lee_chienhui - github.com/light-fury • [Archive](https://web.archive.org/web/20230513202311/https://github.com/light-fury) - medium.com/@leech.developer -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Gary Lee / ChienHui Lee / Light Fury / Leech Developer” · published 2025-06-19 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Same persona record: ChienHui Lee

Other identifiers the reporting files under the same persona; 4 of 13 are shown.

All 13 on the ChienHui Lee page

Same persona record: Gary Lee

Other identifiers the reporting files under the same persona; 4 of 12 are shown.

All 12 on the Gary Lee page

Cited by the same report: x.com/zachxbt/status/1812856350151766209

ZachXBT (@zachxbt) lists 12 other indicators in this source. 2 are shown, chosen across types.

All 13 indicators from this source

Cited by the same report: lazarus.group/team/gary-lee

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 13 other indicators in this source. 1 are shown, chosen across types.

All 14 indicators from this source

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 1 are shown, chosen across types.

All 855 indicators from this source