Chollima Hunter

← All personas

Brent MacGyver

Also reported as: Black Eagleblackeagle273

A fabricated professional identity used in the DPRK remote IT-worker scheme. Most of what follows is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Brent MacGyver. The attribution is theirs, not this site's.

The remainder was read by this site from the account itself and is cited to the page and date it was read.

IT Worker Fraud First reported 2025-07-23

Profiles and evidence

Identifiers attributed to this persona

5 indicators the sources below record for this operator, each with its sources.

IndicatorTypeAccount status
Black Eagle alias —
Brent MacGyver alias —
https://hub.docker.com/u/blackeagle273 dockerhub account live checked 2026-11-08
be3830072@gmail.com email address —
https://github.com/blackeagle273 github profile live checked 2026-09-02

Black Eagle

alias IT Worker Fraud RESEARCHER POST

First seen 2025-07-23 · last seen 2025-07-23

Source

Brent MacGyver

alias IT Worker Fraud CURATED

First seen 2025-07-23 · last seen 2025-07-23

Sources

  • x.com/browsercookies/status/1947841948825620870 — Cookie Connoisseur (@browsercookies) · under “Brent MacGyver / Black Eagle / blackeagle273” · published 2025-07-23 · pulled 2026-08-30
  • Found on 17 September 2026 by asking Docker Hub whether an account exists under blackeagle273, one of the logins the registry already holds for this operator, and read from the profile cited. The account states a registration date of 25 February 2025 and a display name of blue guy. The display name is kept here rather than as an alias, because it restates the handle, describes the work, or repeats what this operator is already called. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
    hub.docker.com/u/blackeagle273 — Chollima Hunter · under “Brent MacGyver” · pulled 2026-09-17

https://hub.docker.com/u/blackeagle273

dockerhub account IT Worker Fraud CURATED live checked 2026-11-08

First seen unknown · last seen unknown

Source

  • Found on 17 September 2026 by asking Docker Hub whether an account exists under blackeagle273, one of the logins the registry already holds for this operator, and read from the profile cited. The account states a registration date of 25 February 2025 and a display name of blue guy. The display name is kept here rather than as an alias, because it restates the handle, describes the work, or repeats what this operator is already called. The handle is what links this account to the rest; nothing here establishes that one person holds both, and a display name on a profile is a name the account presents, not an identification.
    hub.docker.com/u/blackeagle273 — Chollima Hunter · under “Brent MacGyver” · pulled 2026-09-17

be3830072@gmail.com

email address IT Worker Fraud RESEARCHER POST

First seen 2025-07-23 · last seen 2025-07-23

Source

https://github.com/blackeagle273

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-02

First seen 2025-07-23 · last seen 2025-07-23

Source

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Brent MacGyver as the name of the operator is the cited researcher’s assertion, repeated here as their claim.