Muhammad Abdullah

Morris Freeman

alias IT Worker Fraud CURATED

First seen unknown · last seen unknown

Source

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under polartar, a login the index already carries for this persona on another platform. The profile gives a member-since date of 5 December 2024. It displays the name Morris Freeman, which no source this site holds had attached to this operator before. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.

  gitlab.com/polartar — Chollima Hunter · under “Muhammad Abdullah / Morris Freeman” · pulled 2026-09-13

Muhammad Abdullah

alias IT Worker Fraud CURATED

First seen unknown · last seen unknown

Sources

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under polartar, a login the index already carries for this persona on another platform. The profile gives a member-since date of 5 December 2024. It displays the name Morris Freeman, which no source this site holds had attached to this operator before. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.

  gitlab.com/polartar — Chollima Hunter · under “Muhammad Abdullah / Morris Freeman” · pulled 2026-09-13

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under talentdev2020, a login the index already carries for this persona on another platform. The profile gives a member-since date of 19 May 2021. It displays "talentdev2020", which is a display name rather than a person's name and is recorded here rather than as an alias. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.

  gitlab.com/talentdev2020 — Chollima Hunter · under “Muhammad Abdullah” · pulled 2026-09-13

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against dev.to, and read from the profile's own public API. An account exists under polartar, a login the index already carries for this persona on another platform. It gives a joined date of Apr 30, 2020. It displays "polartar", a display name rather than a person's name. The profile links a GitHub account, polartar. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.

  dev.to/polartar — Chollima Hunter · under “Muhammad Abdullah” · pulled 2026-09-13

• Found on 17 September 2026 by asking Docker Hub whether an account exists under talentdev2020, one of the logins the registry already holds for this operator, and read from the profile cited. The account states a registration date of 25 October 2022. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.

  hub.docker.com/u/talentdev2020 — Chollima Hunter · under “Muhammad Abdullah” · pulled 2026-09-17

https://dev.to/polartar

devto account IT Worker Fraud CURATED live checked 2026-11-08

First seen unknown · last seen unknown

Source

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against dev.to, and read from the profile's own public API. An account exists under polartar, a login the index already carries for this persona on another platform. It gives a joined date of Apr 30, 2020. It displays "polartar", a display name rather than a person's name. The profile links a GitHub account, polartar. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.

  dev.to/polartar — Chollima Hunter · under “Muhammad Abdullah” · pulled 2026-09-13

https://hub.docker.com/u/talentdev2020

dockerhub account IT Worker Fraud CURATED live checked 2026-11-08

First seen unknown · last seen unknown

Source

• Found on 17 September 2026 by asking Docker Hub whether an account exists under talentdev2020, one of the logins the registry already holds for this operator, and read from the profile cited. The account states a registration date of 25 October 2022. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.

  hub.docker.com/u/talentdev2020 — Chollima Hunter · under “Muhammad Abdullah” · pulled 2026-09-17

polaris.center@outlook.com

email address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09

https://github.com/aristidesgpg

github profile IT Worker Fraud THIRD-PARTY REGISTRY live checked 2026-09-02

First seen unknown · last seen unknown

Source

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09

https://github.com/polartar

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as polartar

First seen 2026-08-30 · last seen 2026-10-18

Sources

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09

• … - https://x.com/zachxbt/status/1940388827392344261 #### Muhammad Abdullah - github.com/polartar • [Archive](https://archive.ph/z1ghl) - x.com/m_polartar - 0xf7f89251eaa664993893efea0e55d8ec3306d959 -  -…

  DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Muhammad Abdullah” · published 2025-06-19 · pulled 2026-08-30

https://github.com/talentdev2020

github profile IT Worker Fraud THIRD-PARTY REGISTRY removed checked 2026-09-02

First seen unknown · last seen unknown

Source

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09

https://gitlab.com/polartar

gitlab account IT Worker Fraud CURATED

First seen unknown · last seen unknown

Source

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under polartar, a login the index already carries for this persona on another platform. The profile gives a member-since date of 5 December 2024. It displays the name Morris Freeman, which no source this site holds had attached to this operator before. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.

  gitlab.com/polartar — Chollima Hunter · under “Muhammad Abdullah / Morris Freeman” · pulled 2026-09-13

https://gitlab.com/talentdev2020

gitlab account IT Worker Fraud CURATED

First seen unknown · last seen unknown

Source

• Found on 13 September 2026 by probing every account handle this site already holds for this operator against GitLab, and read from the profile cited. An active GitLab account exists under talentdev2020, a login the index already carries for this persona on another platform. The profile gives a member-since date of 19 May 2021. It displays "talentdev2020", which is a display name rather than a person's name and is recorded here rather than as an alias. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification. The profile's bio, location and links render only in a browser and were not read, so nothing is claimed about them either way.

  gitlab.com/talentdev2020 — Chollima Hunter · under “Muhammad Abdullah” · pulled 2026-09-13

0xf7f89251eaa664993893efea0e55d8ec3306d959

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09

https://x.com/m_polartar

x account IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

• Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.

  lazarus.group/team/muhammad-abdullah — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Muhammad Abdullah / polartar / talentdev2020 / aristidesgpg / WebExpert2000” · pulled 2026-09-09