← Remote Workers

https://t.me/zhmolly

https://t.me/zhmolly is a Telegram account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2026-09-01 and the most recent 2026-10-18.

telegram account IT Worker Fraud MATCHED IN SOURCE live checked 2026-11-08

Listed as zhmolly

First seen 2026-09-01 · last seen 2026-10-18

Source

• Nearby text:

  …github.com/zhmoly • [Archive](https://archive.ph/7XiAc) - t.me/zzmoly (ID: 1968323567) • ([Messages](./user-1968323567-@zzmoly.txt)) - t.me/zhmolly - zhmolly@proton.me - Fukuoka, Japan - Sadao Elichi Japan MM6842521 - 2c5gD79Um49VmLCx54a89vVL84kFCiWmj82Zyg8QVVWi -…

  DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Sadao Elichi / David Adachi / zhmolly” · published 2025-06-19 · pulled 2026-09-01

Find this indicator in the index, or see every Telegram account this site holds under Telegram accounts in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 12 are shown, chosen across types.

• https://calendly.com/zerobit417 Calendly account
• https://dev.to/scott_brown_b611d05a865cf DEV Community account
• haruto918miura@gmail.com email address
• https://fiverr.com/derekmiller03 Fiverr account
• https://freelancer.com/u/spectrecoder Freelancer.com account
• https://freelancermap.com/profile/denis-rudink freelancermap account
• https://github.com/polartar GitHub account
• 223.165.6.13 IP address
• https://laborx.com/freelancers/users/id328992 LaborX account
• https://www.linkedin.com/in/eric-low-a5795033b/ LinkedIn account
• https://linktr.ee/codeninja819 Linktree account
• https://t.me/zzmoly Telegram account

All 855 indicators from this source