Tec Guru
Also reported as: tecguru113
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Tec Guru. The attribution is theirs, not this site's.
Profiles and evidence
The job advertisement as Silent Push published it, giving the telephone number and Telegram handle to contact. The people pictured in it are stock imagery and have no connection to anyone involved.
Identifiers attributed to this persona
4 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Tec Guru |
alias | |
https://discord.com/users/1453753519436861505 |
discord account | |
+16509180424 |
phone number | |
https://t.me/tecguru0618 |
telegram account | live |
Tec Guru
alias IT Worker Fraud RESEARCHER POST
Source
-
Silent Push reports a job advertisement posted to a Discord server named Mouse Review by the account tecguru113, seeking people in the United States, the European Union and Latin America to sit on camera in job interviews and receive salaries on behalf of whoever placed the ad, for 35 percent of the pay. Its analyst contacted the Telegram handle in the ad under a fake persona, spoke with the representative, who called himself Tec Guru, by text and on a video call, and assesses with high confidence that he is a North Korean IT worker, resting that on the financial, operational and infrastructure data he provided rather than on his behaviour on the call. The Telegram handle is in the report's text; the telephone number is read from the advertisement image the report publishes, at full resolution. The name is what the representative called himself and settles nothing on its own.
www.silentpush.com/blog/nk-it-worker/ — Silent Push
https://discord.com/users/1453753519436861505
discord account IT Worker Fraud RESEARCHER POST
Source
-
Silent Push reports a job advertisement posted to a Discord server named Mouse Review by the account tecguru113, seeking people in the United States, the European Union and Latin America to sit on camera in job interviews and receive salaries on behalf of whoever placed the ad, for 35 percent of the pay. Its analyst contacted the Telegram handle in the ad under a fake persona, spoke with the representative, who called himself Tec Guru, by text and on a video call, and assesses with high confidence that he is a North Korean IT worker, resting that on the financial, operational and infrastructure data he provided rather than on his behaviour on the call. The Telegram handle is in the report's text; the telephone number is read from the advertisement image the report publishes, at full resolution. The name is what the representative called himself and settles nothing on its own.
www.silentpush.com/blog/nk-it-worker/ — Silent Push
+16509180424
phone number IT Worker Fraud RESEARCHER POST
Line type
| Line type | VoIP |
|---|---|
| Carrier | GOOGLE VOICE |
| Rate centre | SAN MATEO, CA |
Source
-
Silent Push reports a job advertisement posted to a Discord server named Mouse Review by the account tecguru113, seeking people in the United States, the European Union and Latin America to sit on camera in job interviews and receive salaries on behalf of whoever placed the ad, for 35 percent of the pay. Its analyst contacted the Telegram handle in the ad under a fake persona, spoke with the representative, who called himself Tec Guru, by text and on a video call, and assesses with high confidence that he is a North Korean IT worker, resting that on the financial, operational and infrastructure data he provided rather than on his behaviour on the call. The Telegram handle is in the report's text; the telephone number is read from the advertisement image the report publishes, at full resolution. The name is what the representative called himself and settles nothing on its own.
www.silentpush.com/blog/nk-it-worker/ — Silent Push
https://t.me/tecguru0618
telegram account IT Worker Fraud RESEARCHER POST live
live
Source
-
Silent Push reports a job advertisement posted to a Discord server named Mouse Review by the account tecguru113, seeking people in the United States, the European Union and Latin America to sit on camera in job interviews and receive salaries on behalf of whoever placed the ad, for 35 percent of the pay. Its analyst contacted the Telegram handle in the ad under a fake persona, spoke with the representative, who called himself Tec Guru, by text and on a video call, and assesses with high confidence that he is a North Korean IT worker, resting that on the financial, operational and infrastructure data he provided rather than on his behaviour on the call. The Telegram handle is in the report's text; the telephone number is read from the advertisement image the report publishes, at full resolution. The name is what the representative called himself and settles nothing on its own.
www.silentpush.com/blog/nk-it-worker/ — Silent Push
Sources
- www.silentpush.com/blog/nk-it-worker/ — Silent Push