Share this page!

Enter URL or ID to Unroll

You can paste full URL like: https://x.com/threadreaderapp/status/1644127596119195649
or just the ID like: 1644127596119195649

How to get URL link on X (Twitter) App

  1. On the Twitter thread, click on or icon on the bottom
  2. Click again on or Share Via icon
  3. Click on Copy Link to Tweet
  4. Paste it above and click "Unroll Thread"!
  5. More info at Twitter Help
Cookie Connoisseur Profile picture
@browsercookies
Jul 24 • 8 tweets • 2 min read • Read on X
Whats this... real DPRK ITW names and related emails/profiles?! 🇰🇵🍪🇰🇵🍪🇰🇵🍪

Enjoyyy and enrich with your data in the thread below ~> ❤️❤️🔥🔥

(will post raw for easier searching in 🧵🧵)

@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci #NorthKorea #DPRK Image
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci Black Man
github[.]com/Lunggo123
calanderin0130@gmail[.]com

Ri Min Hyok
Mister Black
github[.]com/business-developer-alpha business.developer.alpha@gmail[.]com

Jon Son Chol
goodlife26918@gmail[.]com
trello[.]com/u/goodlife169
github[.]com/good-life-26918
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci Ri Min Hyok
LuxKan / Lukas Santiago
github[.]com/LuxKan
luxkan105@gmail[.]com

JonIlGuk
Minato Hirano / Andire Popa / Apple
github[.]com/AndirePopa
furtunate6828@gmail[.]com

Pak Guk Song
Marvelous Tech
rusuland9@gmail[.]com
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci Son Rim Song
yuto.matsumori.dev2920@gmail[.]com github[.]com/yuto2920

Jo Hyon Ho
https://github[.]com/blink-dev-hub blink.dev02@gmail[.]com
Unattrib:
shiningstar12710@gmail[.]com Ranjeet.Yadav@Honeywell[.]com
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci Pak Jin Myong
ecomdevstar@gmail[.]com
Ecomdev Star
live:.cid.2e453cf6e44737af
x[.]com/EcomdevStar
github[.]com/ecomdevstar

Kim Song Gyu
SeaStorm
github[.]com/RonanSteel seadragon000407@gmail[.]com github[.]com/SeaDragon0407 sealion9847@gmail[.]com
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci KimThaeGwang
Araki Sato / James Ybarra
Oleksii Bohatyrenko (claims Ukrainian) github[.]com/OleksiiBohatyrenko oleksiibohatyrenko2@gmail[.]com

Son Rim Song
Pinewood
pinewoodaldridge@gmail[.]com github[.]com/Pindra2920
wrightleo628@gmail[.]com
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci Ryu Un Song - Shopify Dev
Kakassi Shadow
cupcake031112@gmail[.]com
github[.]com/John-smith1998722 kakassi1998722@gmail[.]com

Om Ju Song
db05310@outlook[.]com

Jong Il Gwang
sports.fanatic.lux@gmail[.]com
@Narcass3 @aptwhatnow @KawaiiJongUwUn @KeyboardTrial2 @eastside_nci Me waterboarding X with DPRK intel

• • •

Missing some Tweet in this thread? You can try to force a refresh
　

Keep Current with Cookie Connoisseur

Cookie Connoisseur Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @browsercookies

Cookie Connoisseur Profile picture
Jun 30
Other ✨interesting ✨North Korean threat actor Google searches and/or communications. 🧵

(1) Researching drones, radar trucks, etc. Lots of activity

#DPRK #NorthKorea roboflow.comImage
Image
Image
Image
Looks like they wanted someone to believe they were a citizen of Ukraine! Had to take the day off due to "mass shelling". Needed funds moved outside of @Upwork .

#DPRK #NorthKorea Image
Image
Image
@Upwork VX Media Group was hiring for someone had experience in working with international dev teams in China. What does DPRK man do? Become China man.

Man I bet the lion king pic hit hard for the DPRK boy. Next best would have been Despicable Me.

#DPRK #NorthKorea @aptwhatnow Image
Image
Image
Read 7 tweets
Cookie Connoisseur Profile picture
May 29
DPRK.

"David" also has a zillion other identities he leverages (see thread 🧵). A few interesting ones are several emails under the Korean named app "Haru Hana" (below)

development@haruhana-happytown[.]com
john0812@haruhana-happytown[.]com
thomas0907@haruhana-happytown[.]com Image
More:
david.wenske111@gmail[.]com
jairferreira.dos.santos.plana@gmail[.]com
costin.florea.alba@gmail[.]com
happytown.haruhana@gmail[.]com
smartfox0520@gmail[.]com
josh.desire.soft1020@gmail[.]com
piotr.bugaj.pl@gmail[.]com
christopherfleming0414@gmail[.]com
andreipetrica0302@gmail[.]com
josh.desire.tech@gmail[.]com
franklin.souzadias.1202@gmail[.]com
piotr.dreja.pro@gmail[.]com
joaquimsilva0525@gmail[.]com
kyrychenkov30@gmail[.]com
kylerobertlarsen93@gmail[.]com
juancruzguerra.work@gmail[.]com
mariodelacruztorres462@gmail[.]com
Read 4 tweets
Cookie Connoisseur Profile picture
May 15
Gonna really cook with this one - READY?! 🧵

Did you know DPRK "remote workers" are heavily involved in work outside of IT? Some ITW have transitioned into to Civil Engineers! This has been going on for quite some time...
THIS INCLUDES stamping engineering drawings for construction in the U.S. as purported "Structural Engineers". They are also electrical engineers, construction engineering, etc. they will create CAD drawings for you on your next construction project. Image
Image
Image
Image
And here are a few additional stamps / approvals for related construction projects.

They also operate fake/front architectural / construction companies to facilitate work. They are often on UpWork looking for these sorts of roles as well! Image
Image
Image
Read 9 tweets
Cookie Connoisseur Profile picture
Apr 21
Hello! I come bearing ("suspected") DPRK gifts. Including public Google Drive links they left open containing 🧁goodies. Copies have been made, don't worry!

My (safe) link for the research:


Quick pic..*WAY* data more in files! docs.google.com/document/d/1Id…Image
Other GH mentioned

Github: mastercodercat (Web3/Crypto)
Github: smartgeek1003/olderdev523
Github: adonis0907 (TERMINATED)
- gmail acct exists: adonis0907[@]gmail

@Mandiant @DtexSystems
@Mandiant @DtexSystems So many resumes/personas Image
Read 5 tweets
Cookie Connoisseur Profile picture
Apr 19
His name may be Bobby Lee Ray, but don't be fooled! Although it sounds like he might own a BBQ shop in Tennessee..... he's actually a ✨DPRK IT worker✨ Image
This is a DPRK IT worker, Nikos Amofa! You might find him on other sites too, if you look! Image
This is a DPRK IT worker. He also goes by "ALEX LU" or "YANCY DENNIS" he may have the numbers 917 attached to his email. He claims to be a blockchain expert.

The best part about him is he's connected to the name "Boris" [boss]? @aptwhatnow

Computer: boris@boriss-Mac-2.local Image
Image
Read 11 tweets
Cookie Connoisseur Profile picture
Apr 18
How do you catch a DPRK actor you ask? Here are a few things to think about;

1. They love to use a VPN when applying for jobs. Check your HR system.
2. They love certain email schemas, including emails ending in "dev", "eng", "soft", using periods to separate names (e.g., , corly.devguru. They most commonly use gmail. They also have numbers at the end such as "benton.franklin.0710" "dev84".luke.ford.dev
3. They almost always use a virtual phone number (e.g., Goog Voice, Skype, etc.) during the application process. That said, recently there have been some that have leveraged a U.S. facilitator's number.
Read 23 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

Send Email!

:(