Victor Hazard

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below was filed under the heading “Victor Hazard” by the report that documented it.

IT Worker Fraud First reported 2026-08-30 · last reported 2026-10-18

LinkedIn accounts

Identifiers reported alongside

6 indicators filed under the same heading, each with its sources.

IndicatorTypeAccount status
happy3guy@gmail.com email address —
hazardvictor@hotmail.com email address —
victordev67@gmail.com email address —
vihazard430@gmail.com email address —
https://github.com/black02430horse github profile removed checked 2026-08-30
https://github.com/hazardvictor github profile live checked 2026-08-30

happy3guy@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-30 · last seen 2026-10-18

Source

  • Nearby text:

    …hazardvictor@hotmail.com - linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor - happy3guy@gmail.com - victordev67@gmail.com - 0xefcb06b5ea58fb451c64ec278d957f4ebfd26df7 - 0xfba526813d70be714032c7e2554a4fc239627d75 Gnosis Safe -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Victor Hazard” · published 2025-06-19 · pulled 2026-08-30

hazardvictor@hotmail.com

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-30 · last seen 2026-10-18

Source

  • Nearby text:

    …Signer on Safe 0x0f4 - 0x48f64eb919f72a8ea6b8b86f7a54a3761e53d5dc Signer on Safe 0x0f4 #### Victor Hazard - vihazard430@gmail.com - hazardvictor@hotmail.com - linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor - happy3guy@gmail.com -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Victor Hazard” · published 2025-06-19 · pulled 2026-08-30

victordev67@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-30 · last seen 2026-10-18

Source

  • …linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor - happy3guy@gmail.com - victordev67@gmail.com - 0xefcb06b5ea58fb451c64ec278d957f4ebfd26df7 - 0xfba526813d70be714032c7e2554a4fc239627d75 Gnosis Safe -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Victor Hazard” · published 2025-06-19 · pulled 2026-08-30

vihazard430@gmail.com

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2026-08-30 · last seen 2026-10-18

Source

  • …Signer on Safe 0x0f4 - 0x48f64eb919f72a8ea6b8b86f7a54a3761e53d5dc Signer on Safe 0x0f4 #### Victor Hazard - vihazard430@gmail.com - hazardvictor@hotmail.com - linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Victor Hazard” · published 2025-06-19 · pulled 2026-08-30

https://github.com/black02430horse

github profile IT Worker Fraud MATCHED IN SOURCE removed checked 2026-09-30

Listed as black02430horse

Also listed under black02430horse — this value’s page names all of them.

First seen 2026-04-17 · last seen 2026-10-18

Sources

  • A fourteen-post thread on the accounts that worked on Tokamak Network's bridge front end, marketplace and subgraph between November 2023 and February 2025, read as a single cell from the primary account's following list, commit-email forensics, renamed and deleted handles, and account-creation dates clustered within days of each other. Every value here is stated in the thread; post thirteen is the researcher's own address map for the cell. The second operator on the bridge front end, August 2024 to February 2025, whose GitHub account has since been deleted; the commits remain under this address. Post four describes a tool this account built and ran that harvested pending-transaction data from the Titan chain. The thread notes the handle fits a naming pattern the researcher sees across other DPRK accounts.
    x.com/meow_mfer/status/2045105256120693242 — meow mfer (@meow_mfer) · under “black02430horse” · published 2026-04-17 · pulled 2026-08-30
  • Nearby text:

    …on Safe 0x0f4 #### Victor Hazard - vihazard430@gmail.com - hazardvictor@hotmail.com - linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor - happy3guy@gmail.com - victordev67@gmail.com - 0xefcb06b5ea58fb451c64ec278d957f4ebfd26df7 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Victor Hazard” · published 2025-06-19 · pulled 2026-08-30

https://github.com/hazardvictor

github profile IT Worker Fraud MATCHED IN SOURCE live checked 2026-08-30

Listed as hazardvictor

First seen 2026-08-30 · last seen 2026-10-18

Source

  • Nearby text:

    …Hazard - vihazard430@gmail.com - hazardvictor@hotmail.com - linkedin.com/in/victor-hazard-77ba40305 - github.com/black02430horse - github.com/hazardvictor - happy3guy@gmail.com - victordev67@gmail.com - 0xefcb06b5ea58fb451c64ec278d957f4ebfd26df7 -…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Victor Hazard” · published 2025-06-19 · pulled 2026-08-30

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Victor Hazard is the name an account presented under, not established to be the name of its operator.