Tyler Minegar

Tyler Minegar is an alias that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies) and Chollima Hunter. The earliest of those reports is dated 2025-11-19 and the most recent 2026-09-20.

The reporting files it under the persona Tyler Minegar, alongside 6 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

alias IT Worker Fraud CURATED

First seen 2025-11-19 · last seen 2026-09-20

Sources

  • Named with three aliases; the post publishes no email or code-hosting account for this persona.
    x.com/browsercookies/status/1991206980044877877 — Cookie Connoisseur (@browsercookies) · under “Tyler Minegar / Brock Patterson / Tretiak Sashka / AMangus7” · published 2025-11-19 · pulled 2026-08-30
  • Read on 20 September 2026 by searching GitHub for accounts whose display-name field carries a name this index already holds. The post that names this persona publishes no address and no code-hosting account for it, so both accounts here are new to the record. Exactly two accounts on GitHub display this name and neither handle resembles it. humble0415 was registered on 24 March 2022, states a bio offering senior back-end engineering, holds two repositories — one of them named TMG, and each created and last pushed on a single day — and has no followers and follows nobody. dreamtech777 was registered on 21 May 2025, holds no repositories at all, was last updated three minutes after it was created, has no followers and follows nobody, and publishes tylerminegar.top3@gmail.com on its profile. What raises this above a coincidence of display names is a number. The bulk IT-worker datasets this site already carries hold tylerminegar0415@gmail.com and tylerminegar7@gmail.com, and the two handles are humble0415 and dreamtech777. The 0415 in the first is the 0415 in an address this index already held, which is a value rather than a resemblance between two names, and the account displaying that name beside it is what makes the pair worth recording together. The third address is published by the account itself. Its .top3 suffix is the shape of an address created in a numbered series rather than chosen once. None of this establishes who holds either account, only that these accounts present this name and that one of them carries a number an address in this index carries.
    github.com/humble0415 — Chollima Hunter · under “Tyler Minegar” · pulled 2026-09-20

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Related indicators

Same persona record: Tyler Minegar

Other identifiers the reporting files under the same persona; 5 of 6 are shown.

All 6 on the Tyler Minegar page

Cited by the same report: x.com/browsercookies/status/1991206980044877877

Cookie Connoisseur (@browsercookies) lists 3 other indicators in this source. 1 are shown, chosen across types.

All 4 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.