Kell Daniel

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below was filed under the heading “Kell Daniel” by the report that documented it.

IT Worker Fraud First reported 2026-08-30 · last reported 2026-10-18

LinkedIn accounts

kell-daniel-964a49245

removed checked 2026-09-21

Indicator page: https://www.linkedin.com/in/kell-daniel-964a49245/

linkedin profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-09-21

Listed as kell-daniel-964a49245

First seen 2026-08-30 · last seen 2026-10-18

Source

…t.me/CryptoFist1002 (ID: 5000783370) • ([Messages](./user-5000783370-@CryptoFist1002.txt)) - linkedin.com/in/kell-daniel-964a49245 - https://x.com/browsercookies/status/1934283069101674814 - ![](./1934283069101674814-4.png) - ![](./X_2025-11-22_CryptoFist.png) ####…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Kell Daniel” · published 2025-06-19 · pulled 2026-08-30

Identifiers reported alongside

2 indicators filed under the same heading, each with its sources.

Indicator	Type	Account status
`https://github.com/cryptofist`	github profile	live checked 2026-08-30
`https://t.me/cryptofist1002`	telegram account	not checked

`https://github.com/cryptofist`

github profile IT Worker Fraud MATCHED IN SOURCE live checked 2026-08-30

Listed as cryptofist

First seen 2026-08-30 · last seen 2026-10-18

live checked 2026-08-30

The image is the avatar this account displays, not evidence of who operates it.

Source

Nearby text:

…https://x.com/browsercookies/status/1934283069101674814 - ![](./1934283069101674814-3.png) #### Kell Daniel - x.com/CryptoFist - github.com/CryptoFist • [Archive](https://web.archive.org/web/20250420114428/https://github.com/CryptoFist) - t.me/CryptoFist1002 (ID: 5000783370) •…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Kell Daniel” · published 2025-06-19 · pulled 2026-08-30

`https://t.me/cryptofist1002`

telegram account IT Worker Fraud MATCHED IN SOURCE live checked 2026-11-08

Listed as cryptofist1002

First seen 2026-09-01 · last seen 2026-10-18

live checked 2026-11-08

Source

Nearby text:

…x.com/CryptoFist - github.com/CryptoFist • [Archive](https://web.archive.org/web/20250420114428/https://github.com/CryptoFist) - t.me/CryptoFist1002 (ID: 5000783370) • ([Messages](./user-5000783370-@CryptoFist1002.txt)) - linkedin.com/in/kell-daniel-964a49245 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Kell Daniel” · published 2025-06-19 · pulled 2026-09-01

Sources

DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Kell Daniel” · published 2025-06-19 · pulled 2026-08-30

Back to all personas