Chollima Hunter

← Remote Workers

https://github.com/neonnexus0408

https://github.com/neonnexus0408 is a GitHub account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-07-23.

github profile IT Worker Fraud RESEARCHER POST removed checked 2026-09-02

First seen 2025-07-23 · last seen 2025-07-23

Source

  • Named in the Zhoe Ja Ryong post as the account that persona copied its portfolio site from, and characterized as DPRK in its own right.
    x.com/browsercookies/status/1947837619876045019 — Cookie Connoisseur (@browsercookies) · under “Unattributed” · published 2025-07-23 · pulled 2026-08-30

Find this indicator in the index, or see every GitHub account this site holds under GitHub accounts in the browse listing.

Related indicators

Cited by the same report: x.com/browsercookies/status/1947837619876045019

Cookie Connoisseur (@browsercookies) lists 3 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.