Chai Somsri

Also reported as: ChaiSomsri96George Capraroiugeorge19871205

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.

IT Worker Fraud First reported 2026-08-30 · last reported 2026-10-18

Profiles and evidence

LinkedIn accounts

Identifiers reported alongside

11 indicators filed under the same heading, each with its sources.

IndicatorTypeAccount status
Chai Somsri alias —
George Capraroiu alias —
chaisomsri96@gmail.com email address —
georgecapraroiu1205@gmail.com email address —
melonman913@gmail.com email address —
https://github.com/chaisomsri96 github profile removed checked 2026-08-30
https://medium.com/@chaisomsri96 medium account not checked
https://t.me/chaisomsri telegram account not checked
0x9ce96e07c091662c2605eaae9180de22aad6e8db wallet address —
0xe5a86c150ac44ab8f8b2661c9e8d8b13887360f0 wallet address —
https://x.com/chaisomsri96 x account not checked

Chai Somsri

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09

George Capraroiu

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09

chaisomsri96@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09
  • Nearby text:

    …linkedin.com/in/chai-somsri - github.com/ChaiSomsri96 • [Archive](https://archive.ph/eRFnu) - t.me/chaisomsri (ID: 7022528006) - chaisomsri96@gmail.com - georgecapraroiu1205@gmail.com - melonman913@gmail.com - 0xE5a86c150ac44ab8F8B2661c9e8d8b13887360f0 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Chai Somsri” · published 2025-06-19 · pulled 2026-08-30

georgecapraroiu1205@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09
  • Nearby text:

    …github.com/ChaiSomsri96 • [Archive](https://archive.ph/eRFnu) - t.me/chaisomsri (ID: 7022528006) - chaisomsri96@gmail.com - georgecapraroiu1205@gmail.com - melonman913@gmail.com - 0xE5a86c150ac44ab8F8B2661c9e8d8b13887360f0 - 0x9ce96e07c091662c2605eaae9180de22aad6e8db -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Chai Somsri” · published 2025-06-19 · pulled 2026-08-30

melonman913@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

Also listed under Janul Azwan, Jannik Villostas — this value’s page names all of them.

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09
  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/jannik-villostas — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Jannik Villostas / 0xtomoon / mrcontract17877 / Henry Amin / gonzalodecruz / shoyano / vaccode365” · pulled 2026-09-09
  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/janul-azwan — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Janul Azwan / 0xtomoon / ethprotector” · pulled 2026-09-09
  • Nearby text:

    …0x94A8518B76A3c45F5387B521695024379d43d715 - ![](./lucas-wong.jpg) #### Jannik Villostas - 2025 - 0xtomoon - mrcontract17877 - melonman913@gmail.com - github.com/0xtomoon • [Archive](https://web.archive.org/web/20250516070156/https://github.com/0xtomoon) - x.com/mrcontract17877 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Jannik Villostas” · published 2025-06-19 · pulled 2026-08-30

https://github.com/chaisomsri96

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as chaisomsri96

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09
  • Nearby text:

    …Capraroiu - george19871205 - x.com/chaisomsri96 - x.com/TickyCrypto - medium.com/@chaisomsri96 - linkedin.com/in/chai-somsri - github.com/ChaiSomsri96 • [Archive](https://archive.ph/eRFnu) - t.me/chaisomsri (ID: 7022528006) - chaisomsri96@gmail.com - georgecapraroiu1205@gmail.com -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Chai Somsri” · published 2025-06-19 · pulled 2026-08-30

https://medium.com/@chaisomsri96

medium account IT Worker Fraud MATCHED IN SOURCE

Listed as @chaisomsri96

First seen 2026-09-01 · last seen 2026-10-18

Source

  • …Chai Somsri - 2024, 2025, Credbull - ChaiSomsri96 - George Capraroiu - george19871205 - x.com/chaisomsri96 - x.com/TickyCrypto - medium.com/@chaisomsri96 - linkedin.com/in/chai-somsri - github.com/ChaiSomsri96 • [Archive](https://archive.ph/eRFnu) - t.me/chaisomsri (ID: 7022528006) -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Chai Somsri” · published 2025-06-19 · pulled 2026-09-01

https://t.me/chaisomsri

telegram account IT Worker Fraud MATCHED IN SOURCE live checked 2026-11-08

Listed as chaisomsri

First seen 2026-09-01 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09
  • Nearby text:

    …medium.com/@chaisomsri96 - linkedin.com/in/chai-somsri - github.com/ChaiSomsri96 • [Archive](https://archive.ph/eRFnu) - t.me/chaisomsri (ID: 7022528006) - chaisomsri96@gmail.com - georgecapraroiu1205@gmail.com - melonman913@gmail.com -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Chai Somsri” · published 2025-06-19 · pulled 2026-09-01

0x9ce96e07c091662c2605eaae9180de22aad6e8db

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09

0xe5a86c150ac44ab8f8b2661c9e8d8b13887360f0

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09

https://x.com/chaisomsri96

x account IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09

Sources

  • DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Chai Somsri” · published 2025-06-19 · pulled 2026-08-30
  • lazarus.group/team/chai-somsri — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Chai Somsri / ChaiSomsri96 / George Capraroiu / george19871205” · pulled 2026-09-09
  • lazarus.group/team/jannik-villostas — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Jannik Villostas / 0xtomoon / mrcontract17877 / Henry Amin / gonzalodecruz / shoyano / vaccode365” · pulled 2026-09-09
  • lazarus.group/team/janul-azwan — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Janul Azwan / 0xtomoon / ethprotector” · pulled 2026-09-09

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Chai Somsri is the name an account presented under, not established to be the name of its operator.