Matthew Marron

A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Matthew Marron. The attribution is theirs, not this site's.

IT Worker Fraud First reported 2026-08-19

Identifiers attributed to this persona

1 indicator the source attributes to this operator, each with its sources.

IndicatorTypeAccount status
Matthew Marron alias —

Matthew Marron

alias IT Worker Fraud RESEARCHER POST

First seen 2026-08-19 · last seen 2026-08-19

Source

  • Hayden McKenzie publishes this as one of the aliases tracked across the three investigations the site cites, on a per-alias record that gives its location as Cheswick, Pennsylvania, the role it presents as .NET Software Engineer, and nothing else. The alias pages carry no date of their own, so the date cited is the site's own "Updated 19 Aug 2026" stamp, the last date it states anything was published. The name is the identity the operation presents, not the operator's; a real person whose name or details it may have been assembled from is not the worker.
    haydenmckenzie.com/aliases/matthew+marron — Hayden McKenzie · under “Matthew Marron” · published 2026-08-19 · pulled 2026-09-22

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Matthew Marron as the name of the operator is the cited researcher’s assertion, repeated here as their claim.