Anthony Keller

Also reported as: Daiki Saito

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below was filed under the heading “Anthony Keller / Daiki Saito” by the report that documented it.

IT Worker Fraud First reported 2026-08-30 · last reported 2026-10-18

LinkedIn accounts

Identifiers reported alongside

6 indicators filed under the same heading, each with its sources.

IndicatorTypeAccount status
0xbejaxer@gmail.com email address —
eratos1123@gmail.com email address —
https://github.com/bejaxer github profile removed checked 2026-08-30
https://github.com/cobang github profile removed checked 2026-08-30
https://medium.com/@cryptosavingexpert medium account not checked
https://t.me/lcoppn telegram account not checked

0xbejaxer@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

Listed as 0x.bejaxer@gmail.com

Also listed under Daiki Saito — this value’s page names all of them.

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09
  • …Also maybe James Ling / Smart Ninja / DevSCNinja - coppn - lcoppn - 0x.bejaxer - eratos1123 - eratos1122 - cobang - bejaxer - 0x.bejaxer@gmail.com - eratos1123@gmail.com - github.com/cobang - github.com/bejaxer (Name: 0x A.K.) •…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-08-30

eratos1123@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

Also listed under Daiki Saito — this value’s page names all of them.

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09
  • …/ Smart Ninja / DevSCNinja - coppn - lcoppn - 0x.bejaxer - eratos1123 - eratos1122 - cobang - bejaxer - 0x.bejaxer@gmail.com - eratos1123@gmail.com - github.com/cobang - github.com/bejaxer (Name: 0x A.K.) •…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-08-30

https://github.com/bejaxer

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as bejaxer

Also listed under Daiki Saito — this value’s page names all of them.

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09
  • Nearby text:

    …0x.bejaxer - eratos1123 - eratos1122 - cobang - bejaxer - 0x.bejaxer@gmail.com - eratos1123@gmail.com - github.com/cobang - github.com/bejaxer (Name: 0x A.K.) • [Archive](https://web.archive.org/web/20221130173129/https://github.com/bejaxer) - t.me/lcoppn (ID:749123222) -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-08-30

https://github.com/cobang

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as cobang

Also listed under Daiki Saito — this value’s page names all of them.

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09
  • Nearby text:

    …coppn - lcoppn - 0x.bejaxer - eratos1123 - eratos1122 - cobang - bejaxer - 0x.bejaxer@gmail.com - eratos1123@gmail.com - github.com/cobang - github.com/bejaxer (Name: 0x A.K.) • [Archive](https://web.archive.org/web/20221130173129/https://github.com/bejaxer) - t.me/lcoppn…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-08-30

https://medium.com/@cryptosavingexpert

medium account IT Worker Fraud MATCHED IN SOURCE

Listed as @cryptosavingexpert

First seen 2026-09-01 · last seen 2026-10-18

Source

  • …https://www.coindesk.com/tech/2024/10/02/how-north-korea-infiltrated-the-crypto-industry - https://medium.com/@CryptoSavingExpert/in-depth-review-of-five-new-play-to-earn-games-part-9-magic-craft-professionalism-df7bc9c4b2de - ![](./daiki-saito-magiccraft-1.png) -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-09-01

https://t.me/lcoppn

telegram account IT Worker Fraud MATCHED IN SOURCE live checked 2026-11-08

Listed as lcoppn

Also listed under Daiki Saito — this value’s page names all of them.

First seen 2026-09-01 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09
  • …github.com/bejaxer (Name: 0x A.K.) • [Archive](https://web.archive.org/web/20221130173129/https://github.com/bejaxer) - t.me/lcoppn (ID:749123222) - linkedin.com/in/anthony-keller-022486183/ - 0x4717Af66032b1Dbc35d9b1182F9240994A11bf01 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-09-01

Sources

  • DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Anthony Keller / Daiki Saito” · published 2025-06-19 · pulled 2026-08-30
  • lazarus.group/team/daiki-saito — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Daiki Saito / Anthony Keller / James Ling / Smart Ninja / DevSCNinja / coppn / lcoppn / 0x.bejaxer / eratos1123 / eratos1122 / cobang / bejaxer” · pulled 2026-09-09

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Anthony Keller is the name an account presented under, not established to be the name of its operator.