Marko Nicovic

Also reported as: Hua Min FeTom Callaghan

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Marko Nicovic. The attribution is theirs, not this site's.

IT Worker Fraud First reported 2025-04-18

Identifiers attributed to this persona

3 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Hua Min Fe alias —
Marko Nicovic alias —
Tom Callaghan alias —

Hua Min Fe

alias IT Worker Fraud RESEARCHER POST

First seen 2025-04-18 · last seen 2025-04-18

Source

  • The post names one North Korean IT worker under three identities at once and carries no other detail in its text.
    x.com/narcass3/status/1913292910805516457 — Narcass3 (@Narcass3) · under “Marko Nicovic / Hua Min Fe / Tom Callaghan” · published 2025-04-18 · pulled 2026-08-30

Marko Nicovic

alias IT Worker Fraud RESEARCHER POST

First seen 2025-04-18 · last seen 2025-04-18

Source

  • The post names one North Korean IT worker under three identities at once and carries no other detail in its text.
    x.com/narcass3/status/1913292910805516457 — Narcass3 (@Narcass3) · under “Marko Nicovic / Hua Min Fe / Tom Callaghan” · published 2025-04-18 · pulled 2026-08-30

Tom Callaghan

alias IT Worker Fraud RESEARCHER POST

First seen 2025-04-18 · last seen 2025-04-18

Source

  • The post names one North Korean IT worker under three identities at once and carries no other detail in its text.
    x.com/narcass3/status/1913292910805516457 — Narcass3 (@Narcass3) · under “Marko Nicovic / Hua Min Fe / Tom Callaghan” · published 2025-04-18 · pulled 2026-08-30

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Marko Nicovic as the name of the operator is the cited researcher’s assertion, repeated here as their claim.