Jo Hyon Ho
Jo Hyon Ho is an alias
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies) and Chollima Hunter.
The reports are dated 2025-07-24.
The reporting files it under the persona Jo Hyon Ho, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
alias IT Worker Fraud CURATED
Sources
- x.com/browsercookies/status/1948427372744900758 — Cookie Connoisseur (@browsercookies)
-
Found on 18 September 2026 by taking the local part of an address this index already holds for this operator -- blinkdev02 -- and asking Docker Hub whether an account exists under it. The address is on a consumer mail host, where the local part is a login the holder chose rather than one an employer assigned; handles taken from company addresses were excluded from this pass for that reason. The account states a registration date of 24 April 2026. The login is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
hub.docker.com/u/blinkdev02 — Chollima Hunter
Find this indicator in the index, or see every alias this site holds under Aliases in the browse listing.