Ryu Un Song
Also reported as: Kakassi Shadow
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Ryu Un Song. The attribution is theirs, not this site's.
Identifiers attributed to this persona
5 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Kakassi Shadow |
alias | |
Ryu Un Song |
alias | |
cupcake031112@gmail.com |
email address | |
kakassi1998722@gmail.com |
email address | |
https://github.com/john-smith1998722 |
github profile | removed |
Kakassi Shadow
alias IT Worker Fraud RESEARCHER POST
Source
-
Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The cell is headed "Ryu Un Song - Shopify", which is the researcher naming the platform the persona works on rather than an employer this site can verify.
x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)
Ryu Un Song
alias IT Worker Fraud RESEARCHER POST
Source
-
Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The cell is headed "Ryu Un Song - Shopify", which is the researcher naming the platform the persona works on rather than an employer this site can verify.
x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)
cupcake031112@gmail.com
email address IT Worker Fraud RESEARCHER POST
Source
-
Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The cell is headed "Ryu Un Song - Shopify", which is the researcher naming the platform the persona works on rather than an employer this site can verify.
x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)
kakassi1998722@gmail.com
email address IT Worker Fraud RESEARCHER POST
Source
-
Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The cell is headed "Ryu Un Song - Shopify", which is the researcher naming the platform the persona works on rather than an employer this site can verify.
x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)
https://github.com/john-smith1998722
github profile IT Worker Fraud RESEARCHER POST removed
removed
Source
-
Read from the table image the post carries, rather than from its text. The post is the head of the thread whose later parts this file already cites: those parts restate the table in plain text, and the cells transcribed here are the ones no part reached. The researcher's own layout is what supplies the attribution -- a cell is headed with a Korean name and lists the aliases, accounts and addresses filed under it. The cell is headed "Ryu Un Song - Shopify", which is the researcher naming the platform the persona works on rather than an employer this site can verify.
x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1948426426145005680 — Cookie Connoisseur (@browsercookies)