Kyle

Kyle is an alias that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from KnowBe4. The report is dated 2024-09-18.

The reporting files it under the persona Kyle. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

alias IT Worker Fraud RESEARCHER POST

First seen 2024-09-18 · last seen 2024-09-18

Source

  • A given name and a photograph, published by the company that hired the identity. KnowBe4 took on a principal software engineer for its internal IT AI team in July 2024 after four video interviews, positive references, a copy of what appeared to be a government identification card and a clear background check, then shipped a Mac workstation to an address the hire had asked for that appeared nowhere in the application. On 15 July 2024, the evening the machine was received, its endpoint software alerted on attempts to install password-stealing malware and alter session history; the SOC contained the device within twenty-five minutes, and KnowBe4, after sharing what it collected with Mandiant and the FBI, identified the hire as a DPRK IT worker. Its whitepaper states that he called himself Kyle, that the name and identifying details belonged to a real United States citizen and were used without their permission, and that the surname is withheld to protect that person; this entry records only what KnowBe4 published. The identity presented itself as a United States-born citizen of Asian ancestry educated in Hong Kong with prior roles at large United States companies, and KnowBe4 reports that a device running Raspberry Pi OS had been set up on the laptop's local network to reach it as a KVM. A first name on its own settles nothing, and it is recorded because an operator who introduced himself as Kyle to one hiring team will do so to the next.
    www.knowbe4.com/hubfs/North-Korean-Fake-Employees-Are-Everywhere-WP_EN-us.pdf — KnowBe4 · under “Kyle” · published 2024-09-18 · pulled 2026-09-18

Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.