ares-dev05
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, ares-dev05. The attribution is theirs, not this site's.
Profiles and evidence
GitHub profile ares-dev05 the persona presented.
Identifiers attributed to this persona
2 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
codingninjaprox@gmail.com |
email address | |
https://github.com/ares-dev05 |
github profile | live |
codingninjaprox@gmail.com
email address IT Worker Fraud RESEARCHER POST
Source
-
The account name is transcribed by hand from the screenshot attached to the post, a GitHub profile page carrying the handle ares-dev05 under the display name Full Stack Developer. The post states the account has direct links to Kan Bei, also known as Karl Chong, and cites Nisos research on that actor. The address codingninjaprox@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
x.com/browsercookies/status/1914447327974318298 — Cookie Connoisseur (@browsercookies)
https://github.com/ares-dev05
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
The account name is transcribed by hand from the screenshot attached to the post, a GitHub profile page carrying the handle ares-dev05 under the display name Full Stack Developer. The post states the account has direct links to Kan Bei, also known as Karl Chong, and cites Nisos research on that actor. The address codingninjaprox@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
x.com/browsercookies/status/1914447327974318298 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1914447327974318298 — Cookie Connoisseur (@browsercookies)