Russian accent in the DPRK related cyber operations

2025-04-04 Ketman

https://www.ketman.org/russia-dprk-soft-connection.html

Thumbnail for Russian accent in the DPRK related cyber operations

Ketman follows up on Nisos reporting about North Korean IT worker GitHub accounts and identifies additional connected personas with unusual Russian military imagery. Two linked accounts used Kinzhal hypersonic-missile related avatars traced to Russian forum and state-TV imagery, which Ketman says differs from the generic avatars more commonly seen in DPRK IT worker clusters. The account set shares empty repositories with similar main-style naming patterns, follows and stars related accounts, and appears to use names chosen for impersonation. Ketman treats the imagery as OSINT evidence of possible Russian media consumption or positioning, not as proof of a formal Russia-DPRK cyber command relationship.

Related Reports

« Back