James Ybarra
James Ybarra is an alias
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-07-24.
The reporting files it under the persona Kim Thae Gwang, alongside 6 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud RESEARCHER POST
Source
-
Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The table writes the name without spaces, as KimThaeGwang, and annotates the third alias "claims Ukrainian" -- that is the researcher describing a nationality the persona asserts, not a statement about a real Ukrainian of that name.
x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.