Jon Il Guk

Also reported as: Minato HiranoAndire PopaApple

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Jon Il Guk. The attribution is theirs, not this site's.

IT Worker Fraud First reported 2025-07-24

Identifiers attributed to this persona

6 indicators the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Andire Popa alias —
Apple alias —
Jon Il Guk alias —
Minato Hirano alias —
furtunate6828@gmail.com email address —
https://github.com/andirepopa github profile live checked 2026-09-02

Andire Popa

alias IT Worker Fraud RESEARCHER POST

First seen 2025-07-24 · last seen 2025-07-24

Source

Apple

alias IT Worker Fraud RESEARCHER POST

First seen 2025-07-24 · last seen 2025-07-24

Source

Jon Il Guk

alias IT Worker Fraud RESEARCHER POST

First seen 2025-07-24 · last seen 2025-07-24

Source

Minato Hirano

alias IT Worker Fraud RESEARCHER POST

First seen 2025-07-24 · last seen 2025-07-24

Source

furtunate6828@gmail.com

email address IT Worker Fraud RESEARCHER POST

First seen 2025-07-24 · last seen 2025-07-24

Source

https://github.com/andirepopa

github profile IT Worker Fraud RESEARCHER POST live checked 2026-09-02

First seen 2025-07-24 · last seen 2025-07-24

Source

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Jon Il Guk as the name of the operator is the cited researcher’s assertion, repeated here as their claim.