Andy Bell
Also reported as: bbshark99SharkDev99andy-solution
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.
Photograph published by the registry under this persona, captioned there as “Andy Bell on call.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Identifiers attributed to this persona
8 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Andy Bell |
alias | |
andy-solution |
alias | |
andysolution99@gmail.com |
email address | |
blue.shark99@outlook.com |
email address | |
bbshark.eth |
ens name | |
https://github.com/bbshark99 |
github profile | removed |
0x241d2b20f2c26a2541a0f121d6a33c29cb4cfe69 |
wallet address | |
https://x.com/kevin83191687 |
x account |
Andy Bell
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
andy-solution
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
andysolution99@gmail.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
blue.shark99@outlook.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
bbshark.eth
ens name IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://github.com/bbshark99
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as bbshark99
removed
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
… - https://x.com/zachxbt/status/1940388827392344261 #### Andy Bell - bbshark.eth - github.com/bbshark99 • [Archive](https://archive.ph/X4l1l) - x.com/kevin83191687 - 0x241d2b20f2c26a2541a0f121d6a33c29cb4cfe69 -  -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
0x241d2b20f2c26a2541a0f121d6a33c29cb4cfe69
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://x.com/kevin83191687
x account IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- lazarus.group/team/andy-bell — Lazarus Group DPRK IT-Worker Registry (lazarus.group)