Oleksandr Muravskyi
Also reported as: Artur Dranhoioleksandr-muravskyiPrinceCharming0115
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's. Values this site read from a live account are cited to the page and date.
Profiles and evidence
Avatar published by the registry under this persona, captioned there as “Oleksandr Muravskyi avatar.”. It is the picture the identity presented, not a likeness of anyone.
Identifiers attributed to this persona
7 indicators the sources below record for this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Artur Dranhoi |
alias | |
Oleksandr Muravskyi |
alias | |
oleksandr-muravskyi |
alias | |
artur.dranhoi@exiod.io |
email address | |
coolprince0115@gmail.com |
email address | |
ole.dev300@hotmail.com |
email address | |
olek.muravskyi@outlook.com |
email address |
Artur Dranhoi
alias IT Worker Fraud THIRD-PARTY REGISTRY
Also listed under Artur Dranhoi — this value’s page names all of them.
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/artur-dranhoi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Oleksandr Muravskyi
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
oleksandr-muravskyi
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
artur.dranhoi@exiod.io
email address IT Worker Fraud CURATED
Also listed under Daniel Salo — this value’s page names all of them.
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Read on 21 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae, one of 1,882 such listings posted between 26 June and 2 July 2025 from seller accounts named after each CV's subject. The listing carries a photograph as its product image; it is the same photograph four other listings in the set carry under four other names, so it is not shown here and is not evidence of anyone's face. What ties this listing to the index is the GitHub account printed on the CV, princecharming0115, read directly on 21 September 2026. The account was created in October 2022 and holds 25 repositories. Its own commits are signed coolprince0115@gmail.com 491 times and, once, on the repository it created most recently, dsalo0915@gmail.com, the address the CV gives. Two of its repositories, exoid-did-wallet-backend and did-wallet-verifier-widget, hold 44 commits by a second account, arturdranhoi, signed artur.dranhoi@exiod.io and artur.dranhoi@exoid.io, beside commits by a developer at Exoid, the company whose product they are; the CV describes that product, a decentralised-identity wallet with zero-knowledge proofs built for a DIFC Court notarisation project, as this persona's own work. The lazarus.group registry lists coolprince0115@gmail.com and artur.dranhoi@exiod.io under one operator it names Oleksandr Muravskyi, alias Artur Dranhoi, alias PrinceCharming0115, with no published methodology; the commit metadata read here ties those two addresses and the CV's own to one GitHub account first-hand, which is the corroboration the registry entry lacked, and adds the name, address and telephone number this CV presents under. The registry's remaining two addresses are not repeated here because nothing read first-hand reaches them. The telephone number is printed on the CV as shown and is too short to be a complete Finnish mobile number. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
github.com/princecharming0115 — Chollima Hunter -
…0xa8cb25ddf0a7195bdc3232ac6e1d812c8a4713fe #### Oleksandr Muravskyi (aka Artur Dranhoi) - oleksandr-muravskyi - PrinceCharming0115 - artur.dranhoi@exiod.io - coolprince0115@gmail.com - ole.dev300@hotmail.com - olek.muravskyi@outlook.com #### Joel Kursala -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
coolprince0115@gmail.com
email address IT Worker Fraud CURATED
Also listed under Daniel Salo — this value’s page names all of them.
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Read on 21 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae, one of 1,882 such listings posted between 26 June and 2 July 2025 from seller accounts named after each CV's subject. The listing carries a photograph as its product image; it is the same photograph four other listings in the set carry under four other names, so it is not shown here and is not evidence of anyone's face. What ties this listing to the index is the GitHub account printed on the CV, princecharming0115, read directly on 21 September 2026. The account was created in October 2022 and holds 25 repositories. Its own commits are signed coolprince0115@gmail.com 491 times and, once, on the repository it created most recently, dsalo0915@gmail.com, the address the CV gives. Two of its repositories, exoid-did-wallet-backend and did-wallet-verifier-widget, hold 44 commits by a second account, arturdranhoi, signed artur.dranhoi@exiod.io and artur.dranhoi@exoid.io, beside commits by a developer at Exoid, the company whose product they are; the CV describes that product, a decentralised-identity wallet with zero-knowledge proofs built for a DIFC Court notarisation project, as this persona's own work. The lazarus.group registry lists coolprince0115@gmail.com and artur.dranhoi@exiod.io under one operator it names Oleksandr Muravskyi, alias Artur Dranhoi, alias PrinceCharming0115, with no published methodology; the commit metadata read here ties those two addresses and the CV's own to one GitHub account first-hand, which is the corroboration the registry entry lacked, and adds the name, address and telephone number this CV presents under. The registry's remaining two addresses are not repeated here because nothing read first-hand reaches them. The telephone number is printed on the CV as shown and is too short to be a complete Finnish mobile number. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
github.com/princecharming0115 — Chollima Hunter -
…Oleksandr Muravskyi (aka Artur Dranhoi) - oleksandr-muravskyi - PrinceCharming0115 - artur.dranhoi@exiod.io - coolprince0115@gmail.com - ole.dev300@hotmail.com - olek.muravskyi@outlook.com #### Joel Kursala - 0xa8cB25ddf0A7195BDc3232ac6e1D812c8a4713Fe #### Daniel Klein…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
ole.dev300@hotmail.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Muravskyi (aka Artur Dranhoi) - oleksandr-muravskyi - PrinceCharming0115 - artur.dranhoi@exiod.io - coolprince0115@gmail.com - ole.dev300@hotmail.com - olek.muravskyi@outlook.com #### Joel Kursala - 0xa8cB25ddf0A7195BDc3232ac6e1D812c8a4713Fe #### Daniel Klein / Richard Loan -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
olek.muravskyi@outlook.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Dranhoi) - oleksandr-muravskyi - PrinceCharming0115 - artur.dranhoi@exiod.io - coolprince0115@gmail.com - ole.dev300@hotmail.com - olek.muravskyi@outlook.com #### Joel Kursala - 0xa8cB25ddf0A7195BDc3232ac6e1D812c8a4713Fe #### Daniel Klein / Richard Loan - richardloan0221@gmail.com -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- lazarus.group/team/artur-dranhoi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
- lazarus.group/team/oleksandr-muravskyi — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
- github.com/princecharming0115 — Chollima Hunter