← Remote Workers

https://t.me/peregrine423f

https://t.me/peregrine423f is a Telegram account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from ANY.RUN. The report is dated 2025-12-04.

telegram account IT Worker Fraud MATCHED IN SOURCE live checked 2026-11-08

Listed as peregrine423f

First seen 2025-12-04 · last seen 2025-12-04

Source

• Nearby text:

  …on PHRACK #71 Contagious Interview on PagedOut #4 (Page 76) IOCs Indicators of Compromise IPv4:194.33.45.162 URL:https://t.me/peregrine423f URL:aaronzeeshan.slack.com URL:aaronsfazzy.slack.com URL:https://github.com/7codewizard URL:https://github.com/neymafullstack…

  How We Caught Lazarus's IT Workers Scheme Live on Camera — ANY.RUN · under “About ANY.RUN” · published 2025-12-04 · pulled 2026-08-30

Find this indicator in the index, or see every Telegram account this site holds under Telegram accounts in the browse listing.

Related indicators

Cited by the same report: How We Caught Lazarus's IT Workers Scheme Live on Camera

ANY.RUN lists 9 other indicators in this source.

• https://calendly.com/7codewizard Calendly account
• jacksonkidd216@gmail.com email address
• kamaunjoroge296@gmail.com email address
• https://github.com/7codewizard GitHub account
• https://github.com/cristal83 GitHub account
• https://github.com/neymafullstack GitHub account
• https://github.com/swiftcode1121 GitHub account
• 194.33.45.162 IP address
• https://www.linkedin.com/in/jackson-kidd-1680b2339/ LinkedIn account