Mario Yi
Also reported as: ethhandy
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.
Photograph published by the registry under this persona, captioned there as “Mario Yi.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Identifiers attributed to this persona
3 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Mario Yi |
alias | |
https://github.com/ethhandy |
github profile | removed |
0x86562ecfd557487612c55260fca5fed7c960504e |
wallet address |
Mario Yi
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/mario-yi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://github.com/ethhandy
github profile IT Worker Fraud THIRD-PARTY REGISTRY removed
removed
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/mario-yi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x86562ecfd557487612c55260fca5fed7c960504e
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/mario-yi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- lazarus.group/team/mario-yi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)