Peter Wang
Also reported as: hapetherwpethercapbaymax586
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.
Photograph published by the registry under this persona, captioned there as “Peter Wang 1.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Photograph published by the registry under this persona, captioned there as “Peter Wang playing soccer.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Profiles and evidence
Avatar published by the registry under this persona, captioned there as “Peter Wang avatar.”. It is the picture the identity presented, not a likeness of anyone.
LinkedIn accounts
peter-wang-780259a3
removed
linkedin profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as peter-wang-780259a3
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Peter Wang - 2025 - petherwang@gmail.com - github.com/hapetherw - x.com/hapetherw - linkedin.com/in/peter-wang-780259a3 - t.me/pethercap (ID: 2124964775, prev: @baymax586) - 0x74bc47ea5201a61c7c9a366bb62ecae2713602a1 #### Chai Somsri - 2024, 2025,…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Identifiers reported alongside
7 indicators filed under the same heading, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Peter Wang |
alias | |
petherwang@gmail.com |
email address | |
https://github.com/hapetherw |
github profile | removed |
https://t.me/baymax586 |
telegram account | live |
https://t.me/pethercap |
telegram account | |
0x74bc47ea5201a61c7c9a366bb62ecae2713602a1 |
wallet address | |
https://x.com/hapetherw |
x account |
Peter Wang
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
petherwang@gmail.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…(ID:7245484067) • ([Messages](./user-7245484067-@janbuidl-@mrcontract17877-@0xtomoon-Jannik-Villostas.txt)) #### Peter Wang - 2025 - petherwang@gmail.com - github.com/hapetherw - x.com/hapetherw - linkedin.com/in/peter-wang-780259a3 - t.me/pethercap (ID: 2124964775, prev: @baymax586) -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://github.com/hapetherw
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as hapetherw
removed
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Peter Wang - 2025 - petherwang@gmail.com - github.com/hapetherw - x.com/hapetherw - linkedin.com/in/peter-wang-780259a3 - t.me/pethercap (ID: 2124964775, prev: @baymax586) -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://t.me/baymax586
telegram account IT Worker Fraud THIRD-PARTY REGISTRY live
live
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://t.me/pethercap
telegram account IT Worker Fraud MATCHED IN SOURCE live
Listed as pethercap
live
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Peter Wang - 2025 - petherwang@gmail.com - github.com/hapetherw - x.com/hapetherw - linkedin.com/in/peter-wang-780259a3 - t.me/pethercap (ID: 2124964775, prev: @baymax586) - 0x74bc47ea5201a61c7c9a366bb62ecae2713602a1 #### Chai Somsri - 2024, 2025, Credbull -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
0x74bc47ea5201a61c7c9a366bb62ecae2713602a1
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
https://x.com/hapetherw
x account IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- lazarus.group/team/peter-wang — Lazarus Group DPRK IT-Worker Registry (lazarus.group)