michael-bum
A profile a reviewer opened and left under review. It matches screening signals of DPRK IT-worker personas; no connection to those operations is stated.
| Status | under review |
|---|---|
| Confidence | medium |
| Profile |
github.com/michael-bum
|
| Account created | 2025-09-20 |
| Network | — |
| Claims | — |
| Line type |
VOIP
|
| Photograph | — |
| Signals | Account age vs claimReal namesake |
| Surfaced by | Chollima Hunter research |
| Found by | LinkedIn addresses handed to the queue by the site's operator from their own browsing, with no query behind them |
| First seen | 2026-10-03 |
| Last checked | 2026-10-03 |
Indicators
- GITHUB PROFILE github.com/michael-bum
-
EMAIL ADDRESS
mb860102.us@gmail.com -
PHONE NUMBER
+16464930007
Indexed in the Remote Workers search, each with its own page:
Review
Chollima Hunter research records that an applicant used the name and LinkedIn identity of a real, long-established engineer; that person is a victim of the impersonation and is not named or linked here. The list gives mb860102.us@gmail.com and a Bandwidth number. A GitHub commit search on 3 October 2026 shows that address committing under the impersonated name from the account michael-bum, created on 20 September 2025 with no profile details, and in repositories of shishirparvaz780 and davidh8991: a run of numbered autoppia_agent repositories, agents for the Autoppia web-agent subnet, between September 2025 and May 2026. Those two accounts are recorded as the places the commits sit, not as anything else.
Sources
- GitHub
- Chollima Hunter review, last checked 2026-10-03