Evan Hill
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Evan Hill. The attribution is theirs, not this site's.
Portrait published in the cited post. It shows the image the identity presented as itself and is not necessarily a photograph of the person operating it.
Profiles and evidence
LinkedIn header for the persona, claiming a Chief Software Engineer role at Deltek and study at the University of Tennessee.
Identifiers attributed to this persona
1 indicator the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Evan Hill |
alias |
Evan Hill
alias IT Worker Fraud RESEARCHER POST
Source
-
LinkedIn profile the researcher assesses as a DPRK IT worker, giving Chief Software Engineer, St. Petersburg, Florida, 27 connections, marked open to work, and listing Deltek and the University of Tennessee at Knoxville over a Microsoft campus cover image. The portrait is evidently generated. Two other identities in the same post carry contact details printed into their banner artwork; this one does not, so the name is all there is.
x.com/browsercookies/status/1913761784990949692 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1913761784990949692 — Cookie Connoisseur (@browsercookies)