Derek Otieno

A professional identity this site read directly, cited below. Whether the name belongs to an operator, an invented persona or a real person whose identity was borrowed is not settled here.

IT Worker Fraud First reported 2025-07-01

Profiles and evidence

Curriculum vitae, as published

Name as writtenDerek Otieno
HeadlineSenior Full Stack Engineer (App | Mobile | Web | Bot | AI/ML | ChatGPT)
LocationFredericksburg, VA 22408
Posted2025-07-01
Sourcepipu.cc/en/item_detail.php?item_id=4900
Full text, as published
Derek Otieno Senior Full Stack Engineer (App | Mobile | Web | Bot | AI/ML | ChatGPT) Fredericksburg, VA 22408 derek.otieno.2020@gmail.com +1 (804) 596-5909 ✅ MSCS | 🇺🇸 Based in Virginia React | .NET C# | Node | Laravel | Native Mobile | ROR Summary Experienced Senior Engineer with a Master's in Computer Science, specializing in web, mobile, scraping/bot, and AI/ML solutions. Passionate about resolving client queries and eager to collaborate. Technical Skills Languages & Frameworks: - ASP.NET C#, Xamarin, WPF, C++, Golang, Qt - Java, Java Spring, Kotlin, Swift, Flutter, React Native, Objective-C - ES6, TypeScript, Angular, React.js, Redux, Next.js, Vue.js, Nuxt.js, Ember.js - Node.js, Express, Nest.js, Feathers.js, JEST - Prisma, TypeORM, MongoDB, Sequelize, Entity Framework - GraphQL, Cube, Redis, Memcached - Electron.js, NW.js, Node-GUI, Chrome Extension - Puppeteer, Playwright, Selenium, Scrapy, Chrome DevTools Protocol - Python, Django, Flask, NumPy, SciPy, Pandas - PHP, Laravel, Symfony, Yii, CakePHP, CodeIgniter, Phalcon, PHPUnit - WordPress, Shopify, Drupal, Joomla, Magento - Ruby, Ruby on Rails, RSpec - HTML5, CSS, Tailwind CSS, Styled-Components, Bootstrap - TensorFlow, PyTorch, Keras, AI/ML, OpenCV - MySQL, MSSQL, PostgreSQL, MongoDB, Firebase, Firestore, AWS DynamoDB - PayPal, Stripe, Google Pay, Square - API Integrations (here.com, shipengine, TForce, etc.) - TDD, BDD, DDD Tools & Platforms: - Firebase, AWS (Lambda, EC2, S3), Heroku, GCP, OpenAI, ChatGPT - GitHub, GitLab, Bitbucket - Trello, Jira, Asana, Monday.com Work Experience Senior Full Stack Engineer Upwork | Fredericksburg, VA | Nov 2019 – Present [Upwork Profile](https://www.upwork.com/freelancers/derekotieno) Full Stack Engineer Fuzzie | Singapore | Apr 2016 – Apr 2023 Managed full-stack web/mobile development lifecycle. [Fuzzie Website](https://fuzzie.com.sg) Full Stack Mobile Developer Gaiam Inc | Apr 2017 – Jan 2022 - [iOS App](https://apps.apple.com/us/app/gaia-studio-classes-and-poses/id567767430) - [Google Play](https://play.google.com/store/apps/details?id=com.gaiam.ogastudio) Sr. .NET Developer CMHWorks | Purcellville, VA | Jul 2014 – Jun 2015 Full-stack role with Angular, Nest.js, AWS, and ASP.NET C#. Education M.S. in Computer Science Virginia Commonwealth University | Richmond, VA B.A. in Chemistry & Mathematics Cheney University of Pennsylvania | Cheney, PA Certifications - Java SE6 Certified Programmer Professional - JEE5 Web Component Developer Certified Professional Assessments (Indeed) - Software Developer Skills – Proficient (Mar 2023) - Attention to Detail – Proficient (Mar 2023) - Software Developer Fit – Proficient (Mar 2023) Language - English – Fluent Willing to relocate to: VA, NY US Work Authorization: Yes

Read from the cited page on 2026-09-12, published by Chollima Hunter. Every claim in it is the document's own and not verified; a name or employer it gives may belong to someone with no connection to the operation.

Identifiers attributed to this persona

4 indicators the sources below record for this operator, each with its sources.

IndicatorTypeAccount status
Derek Otieno alias —
derekotieno2020@gmail.com email address —
www.upwork.com/freelancers/derekotieno personal site —
+18045965909 phone number —

Derek Otieno

alias IT Worker Fraud CURATED

First seen 2025-07-01 · last seen 2025-07-01

Source

  • As printed:

    Derek Otieno Senior Full Stack Engineer (App | Mobile | Web | Bot | AI/ML | ChatGPT) Fredericksburg, VA 22408 …
    Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 1 July 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address derek.otieno.2020@gmail.com is what tied the listing to this site's index: it appears in DTEX's i3 Threat Advisory email-indicator appendix, which DTEX itself says is not evidence of a confirmed attribution and may list addresses whose real owners are uninvolved, and in Appendix A of Flare's report Inside the North Korean Infiltrator Threat. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
    pipu.cc/en/item_detail.php?item_id=4900 — Chollima Hunter · under “Derek Otieno” · published 2025-07-01 · pulled 2026-09-12

derekotieno2020@gmail.com

email address IT Worker Fraud CURATED

Listed as derek.otieno.2020@gmail.com

First seen 2025-05-14 · last seen 2026-03-18

Sources

  • As printed:

    … Senior Full Stack Engineer (App | Mobile | Web | Bot | AI/ML | ChatGPT) Fredericksburg, VA 22408 derek.otieno.2020@gmail.com +1 (804) 596-5909 …
    Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 1 July 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address derek.otieno.2020@gmail.com is what tied the listing to this site's index: it appears in DTEX's i3 Threat Advisory email-indicator appendix, which DTEX itself says is not evidence of a confirmed attribution and may list addresses whose real owners are uninvolved, and in Appendix A of Flare's report Inside the North Korean Infiltrator Threat. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
    pipu.cc/en/item_detail.php?item_id=4900 — Chollima Hunter · under “Derek Otieno” · published 2025-07-01 · pulled 2026-09-12
  • Nearby text:

    …uro.snow@gmail.com stanleyc.sky@gmail.com longx695@gmail.com dragonfighter0120@gmail.com garciav.dev@gmail.com m.in.space45@gmail.com derek.otieno.2020@gmail.com usmanjaggi1@gmail.com mr.martin.adrian@gmail.com kalezhang000@gmail.com what.a.fabulous1@gmail.com tinydever@gmail.com dashhello4@gma…
    Inside the North Korean Infiltrator Threat - Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime — Flare · under “Appendix A: Email Indicators” · published 2026-03-18 · pulled 2026-10-01
  • Per DTEX's own advisory text: these IOCs are NOT indicative of a confirmed North-Korea-attributed hack — they may have associations with IT-worker operations and require further investigation if observed in your environment. Any connection to actual persons may be deliberate (an operator using a real person's identity) or incidental, and the actual owner of an email account listed here may be unaware their address is associated with this IOC list. Do not treat presence on this list as proof of wrongdoing by the account holder.
    i3 Threat Advisory: Identifying North Korean IT Workers: Key Threat Indicators — DTEX Systems · published 2025-05-14 · pulled 2026-10-26

www.upwork.com/freelancers/derekotieno

personal site IT Worker Fraud CURATED

First seen 2025-07-01 · last seen 2025-07-01

Source

  • As printed:

    … Senior Full Stack Engineer Upwork | Fredericksburg, VA | Nov 2019 – Present [Upwork Profile](https://www.upwork.com/freelancers/derekotieno) Full Stack Engineer …
    Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 1 July 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address derek.otieno.2020@gmail.com is what tied the listing to this site's index: it appears in DTEX's i3 Threat Advisory email-indicator appendix, which DTEX itself says is not evidence of a confirmed attribution and may list addresses whose real owners are uninvolved, and in Appendix A of Flare's report Inside the North Korean Infiltrator Threat. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
    pipu.cc/en/item_detail.php?item_id=4900 — Chollima Hunter · under “Derek Otieno” · published 2025-07-01 · pulled 2026-09-12

+18045965909

phone number IT Worker Fraud CURATED

First seen 2025-07-01 · last seen 2025-07-01

Line type

Line typeVoIP
CarrierGOOGLE VOICE
Rate centreBOWLING GREEN, VA

Looked up 2026-09-13 at localcallingguide.com and phonevalidator.com. This is a lookup of the line itself. A VoIP line is not evidence on its own.

Source

  • As printed:

    … Fredericksburg, VA 22408 derek.otieno.2020@gmail.com +1 (804) 596-5909 ✅ MSCS | 🇺🇸 Based in Virginia …
    Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 1 July 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address derek.otieno.2020@gmail.com is what tied the listing to this site's index: it appears in DTEX's i3 Threat Advisory email-indicator appendix, which DTEX itself says is not evidence of a confirmed attribution and may list addresses whose real owners are uninvolved, and in Appendix A of Flare's report Inside the North Korean Infiltrator Threat. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
    pipu.cc/en/item_detail.php?item_id=4900 — Chollima Hunter · under “Derek Otieno” · published 2025-07-01 · pulled 2026-09-12

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Derek Otieno as the name of the operator is the cited researcher’s assertion, repeated here as their claim.