Helmi Laine
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Helmi Laine. The attribution is theirs, not this site's.
LinkedIn accounts
https://www.linkedin.com/in/helmi-laine-4aab07432/
linkedin profile IT Worker Fraud RESEARCHER POST
Source
-
Hayden McKenzie publishes this as one of 53 generated female personas in a DPRK IT worker cell's account register, each built around an Outlook mailbox and a LinkedIn profile for an identity based in Finland; the address above is that mailbox. The register marks a LinkedIn profile as created for it; the profile's address is not published. The report The Women Behind North Korea's IT Worker Operations, published the same day, attributes the register to a first-time operative the cell calls Jasmine Bell, who built it in her first weeks after being told to favour European identities because U.S. profiles were too troublesome to create; its own table counts 57 Outlook accounts across the eight country tabs, four more than the site publishes records for. A Slack screenshot in the report shows its LinkedIn profile, linkedin.com/in/helmi-laine-4aab07432, among the four Jasmine submitted that the cell's trainer said were already banned. The name is a generated identity, not the operator's, and a real woman who shares it is not the worker.
haydenmckenzie.com/research/dprk-it-worker-cell-part-one — Hayden McKenzie
Identifiers reported alongside
2 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Helmi Laine |
alias | |
helmilaine19960808@outlook.com |
email address |
Helmi Laine
alias IT Worker Fraud RESEARCHER POST
Source
-
Hayden McKenzie publishes this as one of 53 generated female personas in a DPRK IT worker cell's account register, each built around an Outlook mailbox and a LinkedIn profile for an identity based in Finland; the address above is that mailbox. The register marks a LinkedIn profile as created for it; the profile's address is not published. The report The Women Behind North Korea's IT Worker Operations, published the same day, attributes the register to a first-time operative the cell calls Jasmine Bell, who built it in her first weeks after being told to favour European identities because U.S. profiles were too troublesome to create; its own table counts 57 Outlook accounts across the eight country tabs, four more than the site publishes records for. A Slack screenshot in the report shows its LinkedIn profile, linkedin.com/in/helmi-laine-4aab07432, among the four Jasmine submitted that the cell's trainer said were already banned. The name is a generated identity, not the operator's, and a real woman who shares it is not the worker.
haydenmckenzie.com/aliases/helmi+laine — Hayden McKenzie
helmilaine19960808@outlook.com
email address IT Worker Fraud RESEARCHER POST
Source
-
Hayden McKenzie publishes this as one of 53 generated female personas in a DPRK IT worker cell's account register, each built around an Outlook mailbox and a LinkedIn profile for an identity based in Finland; the address above is that mailbox. The register marks a LinkedIn profile as created for it; the profile's address is not published. The report The Women Behind North Korea's IT Worker Operations, published the same day, attributes the register to a first-time operative the cell calls Jasmine Bell, who built it in her first weeks after being told to favour European identities because U.S. profiles were too troublesome to create; its own table counts 57 Outlook accounts across the eight country tabs, four more than the site publishes records for. A Slack screenshot in the report shows its LinkedIn profile, linkedin.com/in/helmi-laine-4aab07432, among the four Jasmine submitted that the cell's trainer said were already banned. The name is a generated identity, not the operator's, and a real woman who shares it is not the worker.
haydenmckenzie.com/aliases/helmi+laine — Hayden McKenzie
Sources
- haydenmckenzie.com/aliases/helmi+laine — Hayden McKenzie
- haydenmckenzie.com/research/dprk-it-worker-cell-part-one — Hayden McKenzie