Andy Hoog
Also reported as: toparc077andyhogletandy-hoogandyhoogupT077
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's. Values this site read from a live account are cited to the page and date.
Profiles and evidence
Avatar published by the registry under this persona, captioned there as “Andy Hoog avatar.”. It is the picture the identity presented, not a likeness of anyone.
LinkedIn accounts
andy-hoog
removed
linkedin profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as andy-hoog
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…andyhoglet - andy-hoog - andyhoogup - T077 - andyhoogup@gmail.com - github.com/toparc077 • [Archive](https://archive.ph/7lbnH) - linkedin.com/in/andy-hoog/ - x.com/andyhoglet - 0x1043efee936903951b88db23551873bb67292e95 -  -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Identifiers reported alongside
6 indicators filed under the same heading, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Andy Hoog |
alias | |
andyhoogup@gmail.com |
email address | |
https://github.com/toparc077 |
github profile | live |
https://gitlab.com/toparc077 |
gitlab account | |
0x1043efee936903951b88db23551873bb67292e95 |
wallet address | |
https://x.com/andyhoglet |
x account |
Andy Hoog
alias IT Worker Fraud CURATED
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Found on 12 September 2026 by probing the platforms an operator usually reuses a login on, for the handles this site already holds, and read directly from the page cited. A GitLab account under toparc077, one of the logins attributed to this operator, displaying the name Andy Hoog and a member since 14 November 2018 — by some years the oldest account this sweep turned up. No bio, location or links.
gitlab.com/toparc077 — Chollima Hunter
andyhoogup@gmail.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…2024, [Zach's List](https://x.com/zachxbt/status/1824047425822310580) - toparc077 - andyhoglet - andy-hoog - andyhoogup - T077 - andyhoogup@gmail.com - github.com/toparc077 • [Archive](https://archive.ph/7lbnH) - linkedin.com/in/andy-hoog/ - x.com/andyhoglet -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://github.com/toparc077
github profile IT Worker Fraud MATCHED IN SOURCE live
Listed as toparc077
live
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…toparc077 - andyhoglet - andy-hoog - andyhoogup - T077 - andyhoogup@gmail.com - github.com/toparc077 • [Archive](https://archive.ph/7lbnH) - linkedin.com/in/andy-hoog/ - x.com/andyhoglet - 0x1043efee936903951b88db23551873bb67292e95 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://gitlab.com/toparc077
gitlab account IT Worker Fraud CURATED
Source
-
Found on 12 September 2026 by probing the platforms an operator usually reuses a login on, for the handles this site already holds, and read directly from the page cited. A GitLab account under toparc077, one of the logins attributed to this operator, displaying the name Andy Hoog and a member since 14 November 2018 — by some years the oldest account this sweep turned up. No bio, location or links.
gitlab.com/toparc077 — Chollima Hunter
0x1043efee936903951b88db23551873bb67292e95
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Also listed under Jong Pong Ju — this value’s page names all of them.
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://x.com/andyhoglet
x account IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
- lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
- gitlab.com/toparc077 — Chollima Hunter