`https://x.com/ponyjackalx`

https://x.com/ponyjackalx is an X account that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Lazarus Group DPRK IT-Worker Registry (lazarus.group).

The reporting files it under the persona Benjamin Nguyen, alongside 7 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

x account IT Worker Fraud THIRD-PARTY REGISTRY

First seen unknown · last seen unknown

Source

Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/benjamin-nguyen — Lazarus Group DPRK IT-Worker Registry (lazarus.group) · under “Benjamin Nguyen / ponyjackal” · pulled 2026-09-09

Find this indicator in the index, or see every X account this site holds under X accounts in the browse listing.

Related indicators

Same persona record: Benjamin Nguyen

Other identifiers the reporting files under the same persona; 6 of 7 are shown.

All 7 on the Benjamin Nguyen page

Cited by the same report: lazarus.group/team/benjamin-nguyen

Lazarus Group DPRK IT-Worker Registry (lazarus.group) lists 6 other indicators in this source. 1 are shown, chosen across types.

All 7 indicators from this source