Keisuke Watanabe
Also reported as: kasky53keisukew53kdevdivvy0xWookAsky53dev4all.soldev4alldotsolhirayama1534
A fabricated professional identity used in the DPRK remote IT-worker scheme. Most of what follows is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Keisuke Watanabe. The attribution is theirs, not this site's.
The remainder was read by this site from the account itself and is cited to the page and date it was read.
Photograph published by the registry under this persona, captioned there as “Keisuke Watanabe headshot”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Photograph published by the registry under this persona, captioned there as “Younger Keisuke Watanabe”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Profiles and evidence
X profile the cited post publishes, dev4all.sol (@kAsky53), with a generated cartoon avatar rather than a photograph. It is the image the account presented as itself.
LinkedIn accounts
https://www.linkedin.com/in/keisuke-watanabe-357298224/
removed
linkedin profile IT Worker Fraud THIRD-PARTY REGISTRY removed
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Identifiers reported alongside
22 indicators the sources below record for this operator, each with its sources.
kdevdivvy
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Keisuke Watanabe
alias IT Worker Fraud CURATED
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under keisukew53, a login the index already carries for this persona on another platform. The profile gives a member-since date of 26 February 2025. It displays the name Keisuke Watanabe, the same name the reporting already gives. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.
gitlab.com/keisukew53 — Chollima Hunter
92731202+0xwoo@users.noreply.github.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
92731202+kasky53@users.noreply.github.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
92731202+keisukew53@users.noreply.github.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
isaacwolinsky@gmail.com
email address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
keisukew53@gmail.com
email address IT Worker Fraud RESEARCHER POST
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://github.com/0xwoo
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
https://github.com/kasky53
github profile IT Worker Fraud RESEARCHER POST live
live
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://github.com/kdevdivvy
github profile IT Worker Fraud RESEARCHER POST live
live
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
https://github.com/keisukew53
github profile IT Worker Fraud RESEARCHER POST removed
removed
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
https://gitlab.com/keisukew53
gitlab account IT Worker Fraud CURATED live
live
Source
-
Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under keisukew53, a login the index already carries for this persona on another platform. The profile gives a member-since date of 26 February 2025. It displays the name Keisuke Watanabe, the same name the reporting already gives. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.
gitlab.com/keisukew53 — Chollima Hunter
https://t.me/kasky53
telegram account IT Worker Fraud MATCHED IN SOURCE live
Listed as kasky53
live
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…kdevdivvy - dev4all.sol / dev4alldotsol - keisukew53 - 0xWoo (minor username) - hirayama1534 (2021) - watanabeatari@gmail.com - t.me/kAsky53 (ID: 1914451016) • ([Messages](./user-1914451016-@kAsky53.txt)) - dev4all.sol = JBxidGWnhtPTGg8xw7sFT9tF4cfGtHnjYNp5GDJvGveh -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
0x161dea4d7ac627f2bc4358dfece386c0e9f4cc8f
wallet address IT Worker Fraud RESEARCHER POST
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
0x1b89aecc0f8c128150db67d7d0c4b1daeb43eda4
wallet address IT Worker Fraud RESEARCHER POST
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x3af73294445e5f49e19a7a224d2e157a15128735
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x3b6cdb27d54c5773893be72973eacc8681fa21ff
wallet address IT Worker Fraud RESEARCHER POST
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
8mdfRML7z3s8gqDYd72bywcEgQtcvkoJCw2bukv8X71R
wallet address IT Worker Fraud RESEARCHER POST
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
BjGhtq5Vh9Lv1xxBJ6pZKx3ZCmsEHPVoWNZZGdHkVQ4p
wallet address IT Worker Fraud RESEARCHER POST
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
DybGDChJMvX9Jnza4XTQVDyUGZ6jYrRg9Q3CdLiEJeh2
wallet address IT Worker Fraud RESEARCHER POST
Source
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
JBxidGWnhtPTGg8xw7sFT9tF4cfGtHnjYNp5GDJvGveh
wallet address IT Worker Fraud RESEARCHER POST
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://x.com/kasky53
x account IT Worker Fraud RESEARCHER POST
Sources
-
Posted in reply to a company statement, asserting this operator was on payroll at a named firm for years. The post lists the four GitHub handles as 'GitHub alias'; they are recorded as accounts on that wording.
x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator and gives their real citizenship as North Korea. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- x.com/zachxbt/status/2041408263921819822 — ZachXBT (@zachxbt)
- lazarus.group/team/keisuke-watanabe — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
- gitlab.com/keisukew53 — Chollima Hunter