kstar0102

A fabricated professional identity used in the DPRK remote IT-worker scheme. Most of what follows is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, kstar0102. The attribution is theirs, not this site's.

The remainder was read by this site from the account itself and is cited to the page and date it was read.

IT Worker Fraud First reported 2025-08-01 · last reported 2026-09-20

Profiles and evidence

Identifiers attributed to this persona

8 indicators the sources below record for this operator, each with its sources.

IndicatorTypeAccount status
https://dev.to/kstar0102 devto account live checked 2026-11-08
kstar0101@outlook.com email address —
kstar0102@gmail.com email address —
kstar0102@outlook.com email address —
seniordev052@gmail.com email address —
seniordev52@gmail.com email address —
https://github.com/kstar0102 github profile live checked 2026-09-02
https://gitlab.com/kstar0102 gitlab account live checked 2026-11-08

https://dev.to/kstar0102

devto account IT Worker Fraud CURATED live checked 2026-11-08

First seen unknown · last seen unknown

Source

  • Found on 13 September 2026 by probing every account handle this site already holds for this operator against dev.to, and read from the profile's own public API. An account exists under kstar0102, a login the index already carries for this persona on another platform. It gives a joined date of Mar 31, 2021. It displays "Super Dev", a display name rather than a person's name. The profile links a GitHub account, kstar0102. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
    dev.to/kstar0102 — Chollima Hunter · under “kstar0102” · pulled 2026-09-13

kstar0101@outlook.com

email address IT Worker Fraud CURATED

First seen 2026-09-20 · last seen 2026-09-20

Source

  • Read on 20 September 2026 by walking the commit history of every repository on the GitHub account github.com/kstar0102, already held under this persona, and tallying the author line on every commit. A commit's author line is what the holder configured their git client with rather than anything the profile page chooses to display, so it recovers addresses the account never states. The addresses recorded here were not already in this index: kstar0102@gmail.com authored 32 commits across 4 of its repositories, commits as "kstar0102"; kstar0102@outlook.com authored 19 commits across 2 of its repositories, commits as "kstar0102"; kstar0101@outlook.com authored 18 commits across 8 of its repositories, commits as "kstar0102"; seniordev052@gmail.com authored 1 commit across the repository kstar0102/blog_for_me, commits as "kstar0102". Each is admitted because it commits under a name the account itself uses, which is the test that separates the holder's own address from the original author of a repository copied in. Addresses belonging to unrelated developers whose work appears in these repositories are deliberately not recorded, and an address is evidence that whoever held it wrote those commits rather than proof of who holds the account.
    github.com/kstar0102 — Chollima Hunter · under “kstar0102” · pulled 2026-09-20

kstar0102@gmail.com

email address IT Worker Fraud CURATED

First seen 2026-09-20 · last seen 2026-09-20

Source

  • Read on 20 September 2026 by walking the commit history of every repository on the GitHub account github.com/kstar0102, already held under this persona, and tallying the author line on every commit. A commit's author line is what the holder configured their git client with rather than anything the profile page chooses to display, so it recovers addresses the account never states. The addresses recorded here were not already in this index: kstar0102@gmail.com authored 32 commits across 4 of its repositories, commits as "kstar0102"; kstar0102@outlook.com authored 19 commits across 2 of its repositories, commits as "kstar0102"; kstar0101@outlook.com authored 18 commits across 8 of its repositories, commits as "kstar0102"; seniordev052@gmail.com authored 1 commit across the repository kstar0102/blog_for_me, commits as "kstar0102". Each is admitted because it commits under a name the account itself uses, which is the test that separates the holder's own address from the original author of a repository copied in. Addresses belonging to unrelated developers whose work appears in these repositories are deliberately not recorded, and an address is evidence that whoever held it wrote those commits rather than proof of who holds the account.
    github.com/kstar0102 — Chollima Hunter · under “kstar0102” · pulled 2026-09-20

kstar0102@outlook.com

email address IT Worker Fraud CURATED

First seen 2026-09-20 · last seen 2026-09-20

Source

  • Read on 20 September 2026 by walking the commit history of every repository on the GitHub account github.com/kstar0102, already held under this persona, and tallying the author line on every commit. A commit's author line is what the holder configured their git client with rather than anything the profile page chooses to display, so it recovers addresses the account never states. The addresses recorded here were not already in this index: kstar0102@gmail.com authored 32 commits across 4 of its repositories, commits as "kstar0102"; kstar0102@outlook.com authored 19 commits across 2 of its repositories, commits as "kstar0102"; kstar0101@outlook.com authored 18 commits across 8 of its repositories, commits as "kstar0102"; seniordev052@gmail.com authored 1 commit across the repository kstar0102/blog_for_me, commits as "kstar0102". Each is admitted because it commits under a name the account itself uses, which is the test that separates the holder's own address from the original author of a repository copied in. Addresses belonging to unrelated developers whose work appears in these repositories are deliberately not recorded, and an address is evidence that whoever held it wrote those commits rather than proof of who holds the account.
    github.com/kstar0102 — Chollima Hunter · under “kstar0102” · pulled 2026-09-20

seniordev052@gmail.com

email address IT Worker Fraud CURATED

First seen 2026-09-20 · last seen 2026-09-20

Source

  • Read on 20 September 2026 by walking the commit history of every repository on the GitHub account github.com/kstar0102, already held under this persona, and tallying the author line on every commit. A commit's author line is what the holder configured their git client with rather than anything the profile page chooses to display, so it recovers addresses the account never states. The addresses recorded here were not already in this index: kstar0102@gmail.com authored 32 commits across 4 of its repositories, commits as "kstar0102"; kstar0102@outlook.com authored 19 commits across 2 of its repositories, commits as "kstar0102"; kstar0101@outlook.com authored 18 commits across 8 of its repositories, commits as "kstar0102"; seniordev052@gmail.com authored 1 commit across the repository kstar0102/blog_for_me, commits as "kstar0102". Each is admitted because it commits under a name the account itself uses, which is the test that separates the holder's own address from the original author of a repository copied in. Addresses belonging to unrelated developers whose work appears in these repositories are deliberately not recorded, and an address is evidence that whoever held it wrote those commits rather than proof of who holds the account.
    github.com/kstar0102 — Chollima Hunter · under “kstar0102” · pulled 2026-09-20

seniordev52@gmail.com

email address IT Worker Fraud RESEARCHER POST

First seen 2025-08-01 · last seen 2025-08-01

Source

  • Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The post names this account as a follower of Oleksii9999. The screenshot shows the profile headline "Senior Mobile app | Web | API Developer" over the handle kstar0102, an affiliation of ICT Solutions, 112 repositories and 24 followers against 26 following. The same screenshot lists further accounts alongside Oleksii9999, but the post does not attribute those individually and at least one of them belongs to a well known legitimate developer, so none of them are recorded here. The address seniordev52@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
    x.com/browsercookies/status/1951110041047855169 — Cookie Connoisseur (@browsercookies) · under “kstar0102” · published 2025-08-01 · pulled 2026-08-30

https://github.com/kstar0102

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-02

First seen 2025-08-01 · last seen 2025-08-01

Source

  • Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The post names this account as a follower of Oleksii9999. The screenshot shows the profile headline "Senior Mobile app | Web | API Developer" over the handle kstar0102, an affiliation of ICT Solutions, 112 repositories and 24 followers against 26 following. The same screenshot lists further accounts alongside Oleksii9999, but the post does not attribute those individually and at least one of them belongs to a well known legitimate developer, so none of them are recorded here. The address seniordev52@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
    x.com/browsercookies/status/1951110041047855169 — Cookie Connoisseur (@browsercookies) · under “kstar0102” · published 2025-08-01 · pulled 2026-08-30

https://gitlab.com/kstar0102

gitlab account IT Worker Fraud CURATED live checked 2026-11-08

First seen unknown · last seen unknown

Source

  • Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under kstar0102, a login the index already carries for this persona on another platform. The profile gives a member-since date of 3 April 2021. It displays "Super Dev", which is a display name rather than a person's name and is recorded here rather than as an alias. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.
    gitlab.com/kstar0102 — Chollima Hunter · under “kstar0102” · pulled 2026-09-13

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. kstar0102 as the name of the operator is the cited researcher’s assertion, repeated here as their claim.