Khanh Nguyen

Also reported as: DevCrown333

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's. Values this site read from a live account are cited to the page and date.

IT Worker Fraud First reported 2026-09-24

Identifiers attributed to this persona

5 indicators the sources below record for this operator, each with its sources.

IndicatorTypeAccount status
Khanh Nguyen alias —
christinejurich17@gmail.com email address —
devtianlong33@gmail.com email address —
https://github.com/devcrown333 github profile removed checked 2026-09-02
https://github.com/merkleengineer github profile live checked 2026-09-30

Khanh Nguyen

alias IT Worker Fraud CURATED

First seen 2026-09-24 · last seen 2026-09-24

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/khanh-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Khanh Nguyen / DevCrown333” · pulled 2026-09-09
  • Found on 24 September 2026 by searching GitHub's commit index for every personal address the lazarus.group registry and the ZEUS-DEV-919 working document give for a persona, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so former handles below are a matter of record. github.com/MerkleEngineer is account id 175926331, created on 18 July 2024, with the bio Seasoned Blockchain & Web Developer with 10 years of experience. GitHub attributes 824 commits to it; of the 100 its search returns, 99 are signed dev.tianlong33@gmail.com and one christinejurich17@gmail.com, both addresses lazarus.group gives for Khanh Nguyen, and they are made under the author name DevCrown333, the GitHub handle the registry gives for the persona, which now returns not found. Five of its eight repositories were created on the day the account was and committed that day. Its pooltogether-pool-contracts, created on 21 August 2024, carries 221 commits dated from September 2020 onward re-signed as DevCrown333, an open-source project's history presented as the account's own.
    github.com/MerkleEngineer — Chollima Hunter · under “Khanh Nguyen” · pulled 2026-09-24

christinejurich17@gmail.com

email address IT Worker Fraud CURATED

First seen 2026-09-24 · last seen 2026-09-24

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/khanh-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Khanh Nguyen / DevCrown333” · pulled 2026-09-09
  • Found on 24 September 2026 by searching GitHub's commit index for every personal address the lazarus.group registry and the ZEUS-DEV-919 working document give for a persona, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so former handles below are a matter of record. github.com/MerkleEngineer is account id 175926331, created on 18 July 2024, with the bio Seasoned Blockchain & Web Developer with 10 years of experience. GitHub attributes 824 commits to it; of the 100 its search returns, 99 are signed dev.tianlong33@gmail.com and one christinejurich17@gmail.com, both addresses lazarus.group gives for Khanh Nguyen, and they are made under the author name DevCrown333, the GitHub handle the registry gives for the persona, which now returns not found. Five of its eight repositories were created on the day the account was and committed that day. Its pooltogether-pool-contracts, created on 21 August 2024, carries 221 commits dated from September 2020 onward re-signed as DevCrown333, an open-source project's history presented as the account's own.
    github.com/MerkleEngineer — Chollima Hunter · under “Khanh Nguyen” · pulled 2026-09-24

devtianlong33@gmail.com

email address IT Worker Fraud CURATED

First seen 2026-09-24 · last seen 2026-09-24

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/khanh-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Khanh Nguyen / DevCrown333” · pulled 2026-09-09
  • Found on 24 September 2026 by searching GitHub's commit index for every personal address the lazarus.group registry and the ZEUS-DEV-919 working document give for a persona, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so former handles below are a matter of record. github.com/MerkleEngineer is account id 175926331, created on 18 July 2024, with the bio Seasoned Blockchain & Web Developer with 10 years of experience. GitHub attributes 824 commits to it; of the 100 its search returns, 99 are signed dev.tianlong33@gmail.com and one christinejurich17@gmail.com, both addresses lazarus.group gives for Khanh Nguyen, and they are made under the author name DevCrown333, the GitHub handle the registry gives for the persona, which now returns not found. Five of its eight repositories were created on the day the account was and committed that day. Its pooltogether-pool-contracts, created on 21 August 2024, carries 221 commits dated from September 2020 onward re-signed as DevCrown333, an open-source project's history presented as the account's own.
    github.com/MerkleEngineer — Chollima Hunter · under “Khanh Nguyen” · pulled 2026-09-24

https://github.com/devcrown333

github profile IT Worker Fraud THIRD-PARTY REGISTRY removed checked 2026-09-02

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/khanh-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Khanh Nguyen / DevCrown333” · pulled 2026-09-09

https://github.com/merkleengineer

github profile IT Worker Fraud CURATED live checked 2026-09-30

First seen 2026-09-24 · last seen 2026-09-24

Source

  • Found on 24 September 2026 by searching GitHub's commit index for every personal address the lazarus.group registry and the ZEUS-DEV-919 working document give for a persona, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so former handles below are a matter of record. github.com/MerkleEngineer is account id 175926331, created on 18 July 2024, with the bio Seasoned Blockchain & Web Developer with 10 years of experience. GitHub attributes 824 commits to it; of the 100 its search returns, 99 are signed dev.tianlong33@gmail.com and one christinejurich17@gmail.com, both addresses lazarus.group gives for Khanh Nguyen, and they are made under the author name DevCrown333, the GitHub handle the registry gives for the persona, which now returns not found. Five of its eight repositories were created on the day the account was and committed that day. Its pooltogether-pool-contracts, created on 21 August 2024, carries 221 commits dated from September 2020 onward re-signed as DevCrown333, an open-source project's history presented as the account's own.
    github.com/MerkleEngineer — Chollima Hunter · under “Khanh Nguyen” · pulled 2026-09-24

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Khanh Nguyen as the name of the operator is the cited researcher’s assertion, repeated here as their claim.