Ryan Hammonds
Also reported as: Ryan Stringfellow
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Ryan Hammonds. The attribution is theirs, not this site's.
A still from a video call, published in the cited post, with the name the identity joined under shown in the frame. Unlike a profile picture this is whoever actually appeared on the call, which is the reason the post treats it as evidence.
Identifiers attributed to this persona
2 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Ryan Hammonds |
alias | |
Ryan Stringfellow |
alias |
Ryan Hammonds
alias IT Worker Fraud RESEARCHER POST
Source
-
Two of several names the researcher says one operator uses. The post attaches a cropped identity photograph and a still from a video call where the name in the corner of the frame reads Ryan Stringfellow (Unverified).
x.com/browsercookies/status/1913302277689057346 — Cookie Connoisseur (@browsercookies)
Ryan Stringfellow
alias IT Worker Fraud RESEARCHER POST
Source
-
Two of several names the researcher says one operator uses. The post attaches a cropped identity photograph and a still from a video call where the name in the corner of the frame reads Ryan Stringfellow (Unverified).
x.com/browsercookies/status/1913302277689057346 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1913302277689057346 — Cookie Connoisseur (@browsercookies)