Henry Scott
Also reported as: Toothless128Air128731
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Henry Scott. The attribution is theirs, not this site's.
A still from a video interview, published in the cited post, with the name the identity joined the call under shown in the corner of the frame and a virtual background in use. Unlike a profile picture this is whoever actually appeared on the call, which is the reason the post treats it as evidence.
Identifiers attributed to this persona
4 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Henry Scott |
alias | |
monstar911001@gmail.com |
email address | |
https://github.com/air128731 |
github profile | removed |
https://t.me/toothless128 |
telegram account | live |
Henry Scott
alias IT Worker Fraud RESEARCHER POST
Source
-
A reply to browsercookies giving the identity with its indicators written defanged in the post text, recorded here refanged. The post goes on to describe an interview in which the operator appeared to have a second person sitting beside them at the same desk; the remainder of that account runs past the length the syndication endpoint returns and is not transcribed here.
x.com/meow_mfer/status/1932569102905942306 — meow mfer (@meow_mfer)
monstar911001@gmail.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
A reply to browsercookies giving the identity with its indicators written defanged in the post text, recorded here refanged. The post goes on to describe an interview in which the operator appeared to have a second person sitting beside them at the same desk; the remainder of that account runs past the length the syndication endpoint returns and is not transcribed here.
x.com/meow_mfer/status/1932569102905942306 — meow mfer (@meow_mfer) -
…Signer on Safe 0xaf8 - 0xcf5a516b234b958f332dd3c0409c5fda0bd9d1fa Signer on Safe 0xaf8 #### Shiro Masumi - monstar911 - monstar911001@gmail.com - github.com/monstar911 #### Chiko Nakamura Chiko Nakamura - chikonakamura05@gmail.com - chikonakamura613@gmail.com -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://github.com/air128731
github profile IT Worker Fraud RESEARCHER POST removed
removed
Source
-
A reply to browsercookies giving the identity with its indicators written defanged in the post text, recorded here refanged. The post goes on to describe an interview in which the operator appeared to have a second person sitting beside them at the same desk; the remainder of that account runs past the length the syndication endpoint returns and is not transcribed here.
x.com/meow_mfer/status/1932569102905942306 — meow mfer (@meow_mfer)
https://t.me/toothless128
telegram account IT Worker Fraud RESEARCHER POST live
live
Source
-
A reply to browsercookies giving the identity with its indicators written defanged in the post text, recorded here refanged. The post goes on to describe an interview in which the operator appeared to have a second person sitting beside them at the same desk; the remainder of that account runs past the length the syndication endpoint returns and is not transcribed here.
x.com/meow_mfer/status/1932569102905942306 — meow mfer (@meow_mfer)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- x.com/meow_mfer/status/1932569102905942306 — meow mfer (@meow_mfer)