https://gitlab.com/hodlwarden
https://gitlab.com/hodlwarden is a GitLab account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Hunter.
The reporting files it under the persona Ming Cheng, alongside 13 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
gitlab account IT Worker Fraud CURATED live
live
Source
-
Found on 12 September 2026 by probing the platforms an operator usually reuses a login on, for the handles this site already holds, and read directly from the page cited. A GitLab account under hodlwarden, one of the logins attributed to this operator, created on 9 April 2026 — months after the reporting that named the handle, which makes it the only account here the operator is known to have opened since being written about. It displays "Hodl Warden", which is the handle spaced out rather than a name, and carries no bio, location or links.
gitlab.com/hodlwarden — Chollima Hunter
Find this indicator in the index, or see every GitLab account this site holds under GitLab accounts in the browse listing.