188.43.253.77
188.43.253.77 is an IP address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies) and ReliaQuest.
The earliest of those reports is dated 2025-04-18 and the most recent 2025-05-08.
ip address IT Worker Fraud MATCHED IN SOURCE
Listed under James McClung, Ondriah Young.
Network
| Kind | fixed line |
|---|---|
| Network | TRANS-TELECOM |
| Announced by | AS20485 Joint Stock Company TransTeleCom |
| Country | Russia |
Sources
-
The researcher names this as the identity a DPRK IT worker interviews under, claiming Alvin, Texas, and reads the portrait as AI-generated. The post describes the name as a stolen identity, so somewhere there is a real person who carries it and is not accused of anything; it is recorded here because the name is what an interviewer is handed and the entry says plainly whose claim it is and that the identity is stolen. The operator connected from the same Russian address as a second identity the post names.
x.com/browsercookies/status/1913298431738888490 — Cookie Connoisseur (@browsercookies) -
The second identity the post names, described as an IT worker connecting from the same Russian address as the James McClung identity. That shared address is the whole of what links them and is the only value the post gives for this name.
x.com/browsercookies/status/1913298431738888490 — Cookie Connoisseur (@browsercookies) -
The researcher states that two IT-worker personas it was tracking connected from this same Russian address, which is what ties them to one another. The post attaches an AI-generated profile photograph and describes the identity behind it as stolen, so the name it gives is recorded in the held-back list rather than published as a persona here.
x.com/browsercookies/status/1913298431738888490 — Cookie Connoisseur (@browsercookies) -
…campaign; many are geo-located in Khabarovsk, Russia: 80.237.84.12 80.237.87.21 83.234.227.33-8 188.43.33.252 188.43.136.41,115 188.43.253.77 China Unicom ISP China remains North Korea’s most critical ally, providing political support, economic aid, and diplomatic backing.…
Threat Spotlight: Red Flags for Red Star Hackers: Hunting for North Korean Insiders - ReliaQuest — ReliaQuest
Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.