Michael Watkins

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.

IT Worker Fraud

Identifiers attributed to this persona

2 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Michael Watkins alias —
+12228544879 phone number —

Michael Watkins

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Transcribed from the ZEUS-DEV-919 working document, an unsigned compilation published as a Google Doc and linked from a repository on the zeus-dev919 GitHub account. The document describes itself as raw data with no filtering applied and asks a reader to verify every linkage before acting on it, so it is carried here as that compilation's claim and not as a finding of this site. Its persona table pairs each name with the address and Skype identifier the application used. The document marks this number as fabricated. No address is given for this name.
    docs.google.com/document/d/1IdVIzSr5NOi76ugu67Ob3t39K6b4Rz_P7an0Q0M9HWo/edit — ZEUS-DEV-919 working document · under “Michael Watkins” · pulled 2026-09-09

+12228544879

phone number IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Line type

Line typeNot assigned

A per-number lookup returns no record and marks the number fabricated: area code 222 is not valid. No carrier holds this block in the North American numbering plan, so the number is not in service and most likely never was, and a per-number lookup returns no record for it either.

Looked up 2026-09-13 at localcallingguide.com and phonevalidator.com. This is a lookup of the line itself.

Source

  • Transcribed from the ZEUS-DEV-919 working document, an unsigned compilation published as a Google Doc and linked from a repository on the zeus-dev919 GitHub account. The document describes itself as raw data with no filtering applied and asks a reader to verify every linkage before acting on it, so it is carried here as that compilation's claim and not as a finding of this site. Its persona table pairs each name with the address and Skype identifier the application used. The document marks this number as fabricated. No address is given for this name.
    docs.google.com/document/d/1IdVIzSr5NOi76ugu67Ob3t39K6b4Rz_P7an0Q0M9HWo/edit — ZEUS-DEV-919 working document · under “Michael Watkins” · pulled 2026-09-09

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Michael Watkins as the name of the operator is the cited researcher’s assertion, repeated here as their claim.