John Alexander Bird
John Alexander Bird is an alias
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Nisos.
The report is dated 2025-03-27.
The reporting files it under the persona John Alexander Bird, alongside 1 other identifier attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud RESEARCHER POST
Source
-
Nisos reports that this persona's resume was created and updated in 2024 through the GitHub account imcode65, that the account is associated with the address kanbei0605@gmail.com also used by Karl Chong, and that the persona had no active personal website when the report was written, which Nisos reads as a persona not yet seeking employment. The network map ties it to imcode65 through commits.
nisos.com/research/dprk-it-worker-scam-mitigation/ — Nisos
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.