Peter Xiao

Also reported as: Brian Choassasinooz77

Named individual A separate profile exists for Chang Nam Il, matched by name alone. Whether these identifiers belong to that person is the researcher’s attribution, not this site’s.

A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.

IT Worker Fraud

Identifiers attributed to this persona

4 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Brian Cho alias —
Peter Xiao alias —
https://github.com/assasinooz77 github profile removed checked 2026-08-30
0x5d8335834bfdf4c746e277e5100d7c778c807356 wallet address —

Brian Cho

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/peter-xiao — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Peter Xiao / Brian Cho / assasinooz77” · pulled 2026-09-09

Peter Xiao

alias IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/peter-xiao — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Peter Xiao / Brian Cho / assasinooz77” · pulled 2026-09-09

https://github.com/assasinooz77

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-08-30

Listed as assasinooz77

First seen 2026-08-30 · last seen 2026-10-18

Sources

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/peter-xiao — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Peter Xiao / Brian Cho / assasinooz77” · pulled 2026-09-09
  • …Peter Xiao - 2024, [Zach's List](https://x.com/zachxbt/status/1824047425822310580) - Brian Cho - assasinooz77 - github.com/assasinooz77 - 0x5d8335834bfdf4c746e277e5100d7c778c807356 #### Wubone - 2024, [Zach's List](https://x.com/zachxbt/status/1824047425822310580) -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Peter Xiao” · published 2025-06-19 · pulled 2026-08-30

0x5d8335834bfdf4c746e277e5100d7c778c807356

wallet address IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

  • Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
    lazarus.group/team/peter-xiao — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Peter Xiao / Brian Cho / assasinooz77” · pulled 2026-09-09

Sources

  • DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Peter Xiao” · published 2025-06-19 · pulled 2026-08-30
  • lazarus.group/team/peter-xiao — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Peter Xiao / Brian Cho / assasinooz77” · pulled 2026-09-09

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Peter Xiao as the name of the operator is the cited researcher’s assertion, repeated here as their claim.