Eric Low

Also reported as: Arknedwooarkwootark.soft

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.

IT Worker Fraud First reported 2026-08-30 · last reported 2026-10-18

LinkedIn accounts

Identifiers reported alongside

5 indicators filed under the same heading, each with its sources.

IndicatorTypeAccount status
Arkned alias —
Eric Low alias —
wooark alias —
wootark.soft alias —
0x954f20665bcccf58587b49ffee2e593c19c79267 wallet address —

Arkned

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/eric-low — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Eric Low / Arkned / wooark / wootark.soft” · pulled 2026-09-09

Eric Low

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/eric-low — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Eric Low / Arkned / wooark / wootark.soft” · pulled 2026-09-09

wooark

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/eric-low — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Eric Low / Arkned / wooark / wootark.soft” · pulled 2026-09-09

wootark.soft

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/eric-low — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Eric Low / Arkned / wooark / wootark.soft” · pulled 2026-09-09

0x954f20665bcccf58587b49ffee2e593c19c79267

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/eric-low — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Eric Low / Arkned / wooark / wootark.soft” · pulled 2026-09-09

Sources

  • DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Eric Low” · published 2025-06-19 · pulled 2026-08-30
  • lazarus.group/team/eric-low — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Eric Low / Arkned / wooark / wootark.soft” · pulled 2026-09-09

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Eric Low is the name an account presented under, not established to be the name of its operator.