https://www.linkedin.com/in/derrick-davis-602378331/
https://www.linkedin.com/in/derrick-davis-602378331/ is a LinkedIn account
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer).
The report is dated 2025-06-02.
The reporting files it under the persona Derrick Davis, alongside 1 other identifier attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
linkedin profile IT Worker Fraud RESEARCHER POST removed
removed
Source
-
One post listing three names together with a single pool of addresses, phone numbers, accounts and portfolio sites, under the heading the researcher gives it. The post does not say which value belongs to which name, and it does not say the three are one operator, so only the values that name a person themselves are attributed. Everything else is recorded as a group. Independently, Group-IB's research on a reusable persona shell it tracks as cybersage14 names Dejan-Teofilovic as an identity that account shifted to, and the GitHub account under that name was already indexed from that report; this post is a second, separate citation for it.
x.com/meow_mfer/status/1929659508428886218 — meow mfer (@meow_mfer)
Find this indicator in the index, or see every LinkedIn account this site holds under LinkedIn accounts in the browse listing.