DPRK IT WORKERS UNVEILED

2025-08-28 Rakesh Krish

https://theravenfile.com/2025/08/28/dprk-it-workers-unveiled/

Thumbnail for DPRK IT WORKERS UNVEILED

The research identifies suspected DPRK IT worker activity across GitHub, code-sharing sites, freelancing platforms, forums, personal portfolio pages, and resume-hosting services. It frames the activity as part of North Korean remote-job fraud, with workers using fake identities, adopted nationalities, public developer profiles, and resumes to obtain software, blockchain, web, mobile, and AI-related roles. The excerpt lists dozens of GitHub and non-GitHub profiles, resume URLs, and portfolio infrastructure that the author says contain evidence pointing to North Korea. It also notes alleged deepfake use during job applications, which matters because identity fabrication can help sanctioned workers bypass hiring controls and generate revenue through legitimate-looking remote employment.

Indicators of Compromise

Type Value First Seen Last Seen
URL https://yhype.me/github/@starki… 2025-08-28 2025-08-28
URL https://harufuji.vercel.app/ 2025-08-28 2025-08-28
URL https://flowcv.com/resume/e61ht… 2025-08-28 2025-08-28
URL https://treppr.vercel.app/ 2025-08-28 2025-08-28
URL https://sos-security.vercel.app/ 2025-08-28 2025-08-28
URL https://yhype.me/github/@paramo… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/intrep… 2025-08-28 2025-08-28
URL https://uploads.laborx.com/cv/L… 2025-08-28 2025-08-28
URL https://workspace.ru/id/maksim-… 2025-08-28 2025-08-28
URL https://coffee-code.netlify.app 2025-08-28 2025-08-28
URL https://www.idcrawl.com/u/codec… 2025-08-28 2025-08-28
URL https://yhype.me/github/@Golden… 2025-08-28 2025-08-28
URL https://crowdworks-jp.translate… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/workbe… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/hfish7… 2025-08-28 2025-08-28
URL https://thecrazydev-454b7.web.a… 2025-08-28 2025-08-28
URL https://rising-star92.github.io/ 2025-08-28 2025-08-28
URL https://himalayas.app/@codegene… 2025-08-28 2025-08-28
URL https://www.idcrawl.com/aleksan… 2025-08-28 2025-08-28
URL https://faun.dev/@tekmickey0118/ 2025-08-28 2025-08-28
URL https://www.melodyxpot.com/ 2025-08-28 2025-08-28
URL https://repos.ecosyste.ms/hosts… 2025-08-28 2025-08-28
URL https://dennis-blockchain.verce… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/apple.… 2025-08-28 2025-08-28
URL https://yhype.me/github/@topbri… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/tiggon… 2025-08-28 2025-08-28
URL https://yhype.me/github/@devmas… 2025-08-28 2025-08-28
URL https://sketchfab.com/kennydavi… 2025-08-28 2025-08-28
URL https://www.idcrawl.com/u/ericc… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/mateom… 2025-08-28 2025-08-28
URL https://yhype.me/github/@happyd… 2025-08-28 2025-08-28
URL https://kiyoshi-araki-v2.vercel… 2025-08-28 2025-08-28
URL https://rentbarker.vercel.app/ 2025-08-28 2025-08-28
URL https://devpost.com/tenochbush 2025-08-28 2025-08-28
URL https://discourse.threejs.org/u… 2025-08-28 2025-08-28
URL https://yhype.me/github/@BlackS… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/paul.k… 2025-08-28 2025-08-28
URL https://codesandbox.io/u/benbar… 2025-08-28 2025-08-28
URL https://code.grida.co/ 2025-08-28 2025-08-28
URL https://yhype.me/github/@topsta… 2025-08-28 2025-08-28
URL https://www.remotehub.com/alexw… 2025-08-28 2025-08-28
URL https://crowdworks.jp/public/em… 2025-08-28 2025-08-28
URL https://yhype.me/github/@happym… 2025-08-28 2025-08-28
URL https://dev.to/korvalev234234 2025-08-28 2025-08-28
URL https://sakura-70c50.web.app/ 2025-08-28 2025-08-28
URL https://remoteok.com/@kodakdomi… 2025-08-28 2025-08-28
URL https://discourse.threejs.org/u… 2025-08-28 2025-08-28
URL https://joiner-for.vercel.app/ 2025-08-28 2025-08-28
URL https://cosmichive.com/blog/ful… 2025-08-28 2025-08-28
URL https://yhype.me/github/@toptal… 2025-08-28 2025-08-28
URL https://dev.to/phoenixdevguru 2025-08-28 2025-08-28
URL https://yhype.me/github/@goldde… 2025-08-28 2025-08-28
URL https://eric-jin-portfolio.netl… 2025-08-28 2025-08-28
URL https://uploads.laborx.com/cv/G… 2025-08-28 2025-08-28
URL https://forum.dfinity.org/u/kak… 2025-08-28 2025-08-28
URL https://dev.to/melodydev0521 2025-08-28 2025-08-28
URL https://pubhtml5.com/azwe/rvxz/… 2025-08-28 2025-08-28
URL https://yhype.me/github/@branch… 2025-08-28 2025-08-28
URL https://uploads.laborx.com/cv/O… 2025-08-28 2025-08-28
URL https://aiapply.co/resume/67eeb… 2025-08-28 2025-08-28
URL https://uploads.laborx.com/cv/U… 2025-08-28 2025-08-28
DOMAIN crowdworks-jp.translate.goog 2025-08-28 2025-08-28
DOMAIN workspace.ru 2025-08-28 2025-08-28
DOMAIN aiapply.co 2025-08-28 2025-08-28
DOMAIN code.grida.co 2025-08-28 2025-08-28
DOMAIN rising-star92.github.io 2025-08-28 2025-08-28
DOMAIN repos.ecosyste.ms 2025-08-28 2025-08-28
DOMAIN cosmichive.com 2025-08-28 2025-08-28
DOMAIN uploads.laborx.com 2025-08-28 2025-08-28
DOMAIN sketchfab.com 2025-08-28 2025-08-28
DOMAIN faun.dev 2025-08-28 2025-08-28
DOMAIN forum.dfinity.org 2025-08-28 2025-08-28
DOMAIN pubhtml5.com 2025-08-28 2025-08-28
DOMAIN remoteok.com 2025-03-27 2025-08-28
DOMAIN yhype.me 2024-08-23 2025-08-28

Related Reports

« Back