pipu.cc listing 4407

A profile a reviewer opened and left under review. It matches screening signals of DPRK IT-worker personas; no connection to those operations is stated.

Statusunder review
Confidencehigh
Profile
Account created2023-04
Network —
Claims —
Line type Wireless
AT&T Mobility
Photograph NOT A PHOTO
an illustrated Mandalorian helmet
the listing's product image is also the product image of 1 other listing in the set, under other names
SignalsMarketplace CVName mismatchAccount age vs claimPhoto vs name genesis-solution as GenesisSolution
Surfaced bypipu.cc listing 4407
Found bypipu.cc item_detail.php — full crawl of item_id 3446-5343
First seen2026-09-12
Last checked2026-09-13

Indicators

Indexed in the Remote Workers search, each with its own page:

Review

Recovered from pipu.cc listing 4407, one of 1,882 developer resumes uploaded to that marketplace between 26 June and 2 July 2025, each from its own fresh seller account named after the resume's subject. The name the resume is filed under is withheld here. This dataset is as likely to hold a job applicant's harvested CV as an operator's own, item 4590 in this file is a case where the name on one belonged to an uninvolved engineer whose identity had been taken, and the finding is the account rather than the person named on the page. The GitHub account on it, genesis-solution, states the name "GenesisSolution" instead, and was created 2023-04. The telephone number on the resume is a wireless line on AT&T MOBILITY, which is what an ordinary applicant has and is a point against this being a fabricated identity. Nothing here is corroborated by a cited report or by a shared indicator with any persona this site holds. Read item 4590 in this file before drawing a conclusion from a name mismatch: there, the mismatch was an identity theft and the name on the resume belonged to an uninvolved engineer. A resume in this dataset is as likely to have been harvested from a real job applicant as to have been written by an operator, and telling those apart is the whole of the work still outstanding. The photograph published with the listing was examined on 13 September 2026 and is a studio headshot of a woman. It carries no camera metadata and no generator provenance, but neither does any other image on pipu, which re-encodes every upload to an 800x800 thumbnail — so nothing follows from the absence. No AI-image detector has been run against it. It does not appear to show a person of the sex the resume's name suggests. Appearance is not identity, and this cuts both ways: an operator dressing a fabricated CV with a borrowed photograph would produce it, and so would somebody bulk-uploading harvested resumes and pairing them with the wrong pictures. The account's own avatar is an illustrated Mandalorian helmet. There is no face here for an AI-image detector to score, so the AI-generated-photograph heuristic does not apply to this account.

Sources

  • pipu 4407 read by the reviewer
  • GitHub read by the reviewer
  • LinkedIn read by the reviewer
  • Chollima Hunter review, last checked 2026-09-13
Unconfirmed lead under review An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. The heading is the name or account the profile presents under, not established to be the name of whoever operates it. The confidence is this site’s own screening score, not a source’s. If this entry concerns you, see the guidance for listed people.