Trey Ruiz
Also reported as: Trey R.
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Trey Ruiz. The attribution is theirs, not this site's.
Capture of the profile published in the cited post, showing the portrait the account presented as itself. These identities routinely build a persona around a generated image or around a real, uninvolved person.
Identifiers attributed to this persona
2 indicators the source attributes to this operator, each with its sources.
Trey R.
alias IT Worker Fraud RESEARCHER POST
Source
-
Second newly created LinkedIn profile in the same post, shown as Trey R., .NET Full Stack Developer, Austin, Texas, 151 connections, marked open to work, listing the University of Texas at San Antonio. The post gives the full name as trey ruiz. docs/x-source-backlog.md carried this name as Trey Rui for months, which the post itself corrects.
x.com/browsercookies/status/1913748970339500328 — Cookie Connoisseur (@browsercookies)
Trey Ruiz
alias IT Worker Fraud RESEARCHER POST
Source
-
Second newly created LinkedIn profile in the same post, shown as Trey R., .NET Full Stack Developer, Austin, Texas, 151 connections, marked open to work, listing the University of Texas at San Antonio. The post gives the full name as trey ruiz. docs/x-source-backlog.md carried this name as Trey Rui for months, which the post itself corrects.
x.com/browsercookies/status/1913748970339500328 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1913748970339500328 — Cookie Connoisseur (@browsercookies)