Jong Pong Ju
Also reported as: Bryan ChoChris Yuatrobojbugarnet
A professional identity listed by a third-party registry of suspected DPRK IT-worker personas, cited below. The registry publishes no byline or methodology, so the attribution is the registry's.
Photograph the registry publishes for this persona, captioned there as “Wanted poster for Bryan Cho.”, with the name printed beneath it. The photograph and name are the registry's attribution of who operated the identity.
Photograph published by the registry under this persona, captioned there as “Bryan Cho from Despace.”. It shows whoever appeared under this identity, which is not necessarily the person whose details the identity was assembled from — these operations routinely build a persona around a real, uninvolved person.
Profiles and evidence
Identity document published by the registry under this persona, captioned there as “ID of Bryan Cho.”. The registry presents it as a document used for this identity. Its name, number and photograph are the document's own and may belong to a real person whose identity was stolen to build the persona.
Identity document published by the registry under this persona, captioned there as “Bryan Cho as Chris Yu.”. The registry presents it as a document used for this identity. Its name, number and photograph are the document's own and may belong to a real person whose identity was stolen to build the persona.
Screenshot published by the registry under this persona, captioned there as “Second image of Bryan Cho as Chris Yu.”, kept as a record of the profile it shows.
Identifiers attributed to this persona
11 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Bryan Cho |
alias | |
Chris Yu |
alias | |
Jong Pong Ju |
alias | |
atroboj@gmail.com |
email address | |
https://github.com/atroboj |
github profile | removed |
https://github.com/bugarnet |
github profile | removed |
https://t.me/atroobj |
telegram account | live |
0x1043efee936903951b88db23551873bb67292e95 |
wallet address | |
0x3b9a870c24905256de10863cb360f4b93c7cc60f |
wallet address | |
0xc2b2a9c05740eeb7ee7ba7eb3ab11ec8bebcb1d1 |
wallet address | |
ESSfP3aAcW6Z59ozut9Jkqy9btaX5YTHt25b3Vhs2hsf |
wallet address |
Bryan Cho
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Chris Yu
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Jong Pong Ju
alias IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
atroboj@gmail.com
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…2024, [Zach's List](https://x.com/zachxbt/status/1824047425822310580) - Chris Yu - Bryan Cho - atroobj - bugarnet - t.me/atroobj - atroboj@gmail.com - github.com/atroboj • [Archive](https://archive.ph/x0LMf) - github.com/bugarnet (2021, Despace) -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://github.com/atroboj
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as atroboj
removed
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Chris Yu - Bryan Cho - atroobj - bugarnet - t.me/atroobj - atroboj@gmail.com - github.com/atroboj • [Archive](https://archive.ph/x0LMf) - github.com/bugarnet (2021, Despace) - 0x3b9a870c24905256de10863cb360f4b93c7cc60f -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://github.com/bugarnet
github profile IT Worker Fraud MATCHED IN SOURCE removed
Listed as bugarnet
removed
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…Yu - Bryan Cho - atroobj - bugarnet - t.me/atroobj - atroboj@gmail.com - github.com/atroboj • [Archive](https://archive.ph/x0LMf) - github.com/bugarnet (2021, Despace) - 0x3b9a870c24905256de10863cb360f4b93c7cc60f - 0xc2b2a9c05740eeb7ee7ba7eb3ab11ec8bebcb1d1 -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
https://t.me/atroobj
telegram account IT Worker Fraud MATCHED IN SOURCE live
Listed as atroobj
live
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
…2021, 2022, 2023, 2024, [Zach's List](https://x.com/zachxbt/status/1824047425822310580) - Chris Yu - Bryan Cho - atroobj - bugarnet - t.me/atroobj - atroboj@gmail.com - github.com/atroboj • [Archive](https://archive.ph/x0LMf) - github.com/bugarnet (2021, Despace) -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
0x1043efee936903951b88db23551873bb67292e95
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Also listed under Andy Hoog — this value’s page names all of them.
Sources
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group) -
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0x3b9a870c24905256de10863cb360f4b93c7cc60f
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
0xc2b2a9c05740eeb7ee7ba7eb3ab11ec8bebcb1d1
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
ESSfP3aAcW6Z59ozut9Jkqy9btaX5YTHt25b3Vhs2hsf
wallet address IT Worker Fraud THIRD-PARTY REGISTRY
Source
-
Entry in the lazarus.group DPRK IT-worker registry, which asserts that these accounts belong to one operator. The registry publishes no methodology, so this is recorded as its claim and not as a finding of this site. Its evidence links and its cross-references to other operators in the same registry are deliberately not reproduced as indicators.
lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
Sources
- DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
- lazarus.group/team/bryan-cho — Lazarus Group DPRK IT-Worker Registry (lazarus.group)
- lazarus.group/team/andy-hoog — Lazarus Group DPRK IT-Worker Registry (lazarus.group)