Alex Lu
Also reported as: Yancy DennisCode Maestrocodemaestro11
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Alex Lu. The attribution is theirs, not this site's.
Profiles and evidence
GitHub profile codemaestro11 the persona presented.
LinkedIn profile under the name Yancy Dennis, linked to the same persona.
Identifiers attributed to this persona
4 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Alex Lu |
alias | |
Code Maestro |
alias | |
Yancy Dennis |
alias | |
https://github.com/codemaestro11 |
github profile | removed |
Alex Lu
alias IT Worker Fraud RESEARCHER POST
Source
-
The GitHub account is read by hand from the first attached screenshot, a profile page headed Code Maestro with the handle codemaestro11, 56 repositories, and a README whose language breakdown is mostly TypeScript and Solidity. The post's own text states the two names and adds that the operator may attach the number 917 to email addresses; no address is shown, so none is recorded here. This is one of the names docs/x-source-backlog.md had been carrying as unresolved on the belief that it existed only inside an image. It is in the post's text, in a window the sweep never reached.
x.com/browsercookies/status/1913719363401924854 — Cookie Connoisseur (@browsercookies)
Code Maestro
alias IT Worker Fraud RESEARCHER POST
Source
-
The GitHub account is read by hand from the first attached screenshot, a profile page headed Code Maestro with the handle codemaestro11, 56 repositories, and a README whose language breakdown is mostly TypeScript and Solidity. The post's own text states the two names and adds that the operator may attach the number 917 to email addresses; no address is shown, so none is recorded here. This is one of the names docs/x-source-backlog.md had been carrying as unresolved on the belief that it existed only inside an image. It is in the post's text, in a window the sweep never reached.
x.com/browsercookies/status/1913719363401924854 — Cookie Connoisseur (@browsercookies)
Yancy Dennis
alias IT Worker Fraud RESEARCHER POST
Source
-
The GitHub account is read by hand from the first attached screenshot, a profile page headed Code Maestro with the handle codemaestro11, 56 repositories, and a README whose language breakdown is mostly TypeScript and Solidity. The post's own text states the two names and adds that the operator may attach the number 917 to email addresses; no address is shown, so none is recorded here. This is one of the names docs/x-source-backlog.md had been carrying as unresolved on the belief that it existed only inside an image. It is in the post's text, in a window the sweep never reached.
x.com/browsercookies/status/1913719363401924854 — Cookie Connoisseur (@browsercookies)
https://github.com/codemaestro11
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as codemaestro11
removed
Sources
-
The GitHub account is read by hand from the first attached screenshot, a profile page headed Code Maestro with the handle codemaestro11, 56 repositories, and a README whose language breakdown is mostly TypeScript and Solidity. The post's own text states the two names and adds that the operator may attach the number 917 to email addresses; no address is shown, so none is recorded here. This is one of the names docs/x-source-backlog.md had been carrying as unresolved on the belief that it existed only inside an image. It is in the post's text, in a window the sweep never reached.
x.com/browsercookies/status/1913719363401924854 — Cookie Connoisseur (@browsercookies) -
…Alex Lu - Alexlu0917 - codemaestro11 - works with `cooldev900` / `silversoft0707` and `oldhand7` - github.com/alexlu0917 - github.com/CodeMaestro11/ - alexlu0917.dev@gmail.com - codeMaestro11@outlook.com - https://opensea.io/Alexlu0917 - https://web3.career/@alexlu0917 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- x.com/browsercookies/status/1913719363401924854 — Cookie Connoisseur (@browsercookies)