SuperPolaris
Also reported as: Sallamy2580Richard StewartRechard StewartRichard StewardAkimoto AkiraRadenko Mohar
A fabricated professional identity used in the DPRK remote IT-worker scheme. Most of what follows is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, SuperPolaris. The attribution is theirs, not this site's.
The remainder was read by this site from the account itself and is cited to the page and date it was read.
Identifiers attributed to this persona
10 indicators the sources below record for this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Akimoto Akira |
alias | |
Radenko Mohar |
alias | |
Rechard Stewart |
alias | |
Richard Steward |
alias | |
Richard Stewart |
alias | |
SuperPolaris |
alias | |
https://dev.to/sallamy2580 |
devto account | live |
sallamy2580@gmail.com |
email address | |
https://github.com/sallamy2580 |
github profile | live |
https://t.me/superpolaris |
telegram account | live |
Akimoto Akira
alias IT Worker Fraud RESEARCHER POST
Source
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies)
Radenko Mohar
alias IT Worker Fraud RESEARCHER POST
Source
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies)
Rechard Stewart
alias IT Worker Fraud RESEARCHER POST
Source
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies)
Richard Steward
alias IT Worker Fraud RESEARCHER POST
Source
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies)
Richard Stewart
alias IT Worker Fraud RESEARCHER POST
Source
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies)
SuperPolaris
alias IT Worker Fraud CURATED
Sources
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies) -
Found on 13 September 2026 by probing every account handle this site already holds for this operator against dev.to, and read from the profile's own public API. An account exists under sallamy2580, a login the index already carries for this persona on another platform. It gives a joined date of Jul 24, 2022. It displays "Superpol@ris", a display name rather than a person's name. The profile links a GitHub account, sallamy2580. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
dev.to/sallamy2580 — Chollima Hunter
https://dev.to/sallamy2580
devto account IT Worker Fraud CURATED live
live
Source
-
Found on 13 September 2026 by probing every account handle this site already holds for this operator against dev.to, and read from the profile's own public API. An account exists under sallamy2580, a login the index already carries for this persona on another platform. It gives a joined date of Jul 24, 2022. It displays "Superpol@ris", a display name rather than a person's name. The profile links a GitHub account, sallamy2580. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
dev.to/sallamy2580 — Chollima Hunter
sallamy2580@gmail.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies) -
…Akimoto Akira - Richard Steward - Richard Stewart - Superpol@irs - 104654833+sallamy2580@users.noreply.github.com: - sallamy2580 - sallamy2580@gmail.com - https://github.com/sallamy2580 -  -  --- ## Face Pix #### 139.5.157.128 and…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://github.com/sallamy2580
github profile IT Worker Fraud MATCHED IN SOURCE live
Listed as sallamy2580
live
Sources
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies) -
…Steward - Richard Stewart - Superpol@irs - 104654833+sallamy2580@users.noreply.github.com: - sallamy2580 - sallamy2580@gmail.com - https://github.com/sallamy2580 -  -  --- ## Face Pix #### 139.5.157.128 and 212.91.193.27 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://t.me/superpolaris
telegram account IT Worker Fraud CURATED live
live
Source
-
Found on 29 September 2026 by searching GitHub's code for the handles this site already holds for the persona (sallamy2580) and reading the files that name them: contact blocks, profile READMEs and portfolio data in the persona's own repositories or in repositories that credit its accounts. Each value is cited to the file it was read from. Values in copied templates, client team pages and test data are not carried.
github.com/sallamy2580/instagram-mern-awss3/blob/fc517096b5b72ef65468345cf186683167870980/README.md — Chollima Hunter
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies)
- dev.to/sallamy2580 — Chollima Hunter
- github.com/sallamy2580/instagram-mern-awss3/blob/fc517096b5b72ef65468345cf186683167870980/README.md — Chollima Hunter