Joel Kursala

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.

IT Worker Fraud

Profiles and evidence

Identifiers attributed to this persona

2 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Joel Kursala alias —
0xa8cb25ddf0a7195bdc3232ac6e1d812c8a4713fe wallet address —

Joel Kursala

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/joel-kursala — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Joel Kursala” · pulled 2026-09-09

0xa8cb25ddf0a7195bdc3232ac6e1d812c8a4713fe

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

Also listed under Scott Brown — this value’s page names all of them.

First seen unknown · last seen unknown

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/scott-brown — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Scott Brown / Kyle Larsen / Sean Day / breavedev / braverdever / nevermindhim / verytinydever / scott.brown0629” · pulled 2026-09-09
  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/joel-kursala — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Joel Kursala” · pulled 2026-09-09

Sources

  • lazarus.group/team/scott-brown — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Scott Brown / Kyle Larsen / Sean Day / breavedev / braverdever / nevermindhim / verytinydever / scott.brown0629” · pulled 2026-09-09
  • lazarus.group/team/joel-kursala — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Joel Kursala” · pulled 2026-09-09

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Joel Kursala as the name of the operator is the cited researcher’s assertion, repeated here as their claim.