Tyler Minegar
Also reported as: Brock PattersonTretiak SashkaAMangus7
A fabricated professional identity used in the DPRK remote IT-worker scheme. Most of what follows is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Tyler Minegar. The attribution is theirs, not this site's.
The remainder was read by this site from the account itself and is cited to the page and date it was read.
Portrait used by the persona.
Profiles and evidence
Conversation Exchange language-practice profile under the handle elite0107 (Ukraine), claiming to lead frontend development at ArenaOps in Phoenix.
Identifiers attributed to this persona
7 indicators the sources below record for this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Brock Patterson |
alias | |
Tretiak Sashka |
alias | |
Tyler Minegar |
alias | |
tylerminegartop3@gmail.com |
email address | |
https://github.com/dreamtech777 |
github profile | live |
https://github.com/humble0415 |
github profile | live |
https://x.com/amangus7 |
x account |
Brock Patterson
alias IT Worker Fraud RESEARCHER POST
Source
-
Named with three aliases; the post publishes no email or code-hosting account for this persona.
x.com/browsercookies/status/1991206980044877877 — Cookie Connoisseur (@browsercookies)
Tretiak Sashka
alias IT Worker Fraud RESEARCHER POST
Source
-
Named with three aliases; the post publishes no email or code-hosting account for this persona.
x.com/browsercookies/status/1991206980044877877 — Cookie Connoisseur (@browsercookies)
Tyler Minegar
alias IT Worker Fraud CURATED
Sources
-
Named with three aliases; the post publishes no email or code-hosting account for this persona.
x.com/browsercookies/status/1991206980044877877 — Cookie Connoisseur (@browsercookies) -
Read on 20 September 2026 by searching GitHub for accounts whose display-name field carries a name this index already holds. The post that names this persona publishes no address and no code-hosting account for it, so both accounts here are new to the record. Exactly two accounts on GitHub display this name and neither handle resembles it. humble0415 was registered on 24 March 2022, states a bio offering senior back-end engineering, holds two repositories — one of them named TMG, and each created and last pushed on a single day — and has no followers and follows nobody. dreamtech777 was registered on 21 May 2025, holds no repositories at all, was last updated three minutes after it was created, has no followers and follows nobody, and publishes tylerminegar.top3@gmail.com on its profile. What raises this above a coincidence of display names is a number. The bulk IT-worker datasets this site already carries hold tylerminegar0415@gmail.com and tylerminegar7@gmail.com, and the two handles are humble0415 and dreamtech777. The 0415 in the first is the 0415 in an address this index already held, which is a value rather than a resemblance between two names, and the account displaying that name beside it is what makes the pair worth recording together. The third address is published by the account itself. Its .top3 suffix is the shape of an address created in a numbered series rather than chosen once. None of this establishes who holds either account, only that these accounts present this name and that one of them carries a number an address in this index carries.
github.com/humble0415 — Chollima Hunter
tylerminegartop3@gmail.com
email address IT Worker Fraud CURATED
Source
-
Read on 20 September 2026 by searching GitHub for accounts whose display-name field carries a name this index already holds. The post that names this persona publishes no address and no code-hosting account for it, so both accounts here are new to the record. Exactly two accounts on GitHub display this name and neither handle resembles it. humble0415 was registered on 24 March 2022, states a bio offering senior back-end engineering, holds two repositories — one of them named TMG, and each created and last pushed on a single day — and has no followers and follows nobody. dreamtech777 was registered on 21 May 2025, holds no repositories at all, was last updated three minutes after it was created, has no followers and follows nobody, and publishes tylerminegar.top3@gmail.com on its profile. What raises this above a coincidence of display names is a number. The bulk IT-worker datasets this site already carries hold tylerminegar0415@gmail.com and tylerminegar7@gmail.com, and the two handles are humble0415 and dreamtech777. The 0415 in the first is the 0415 in an address this index already held, which is a value rather than a resemblance between two names, and the account displaying that name beside it is what makes the pair worth recording together. The third address is published by the account itself. Its .top3 suffix is the shape of an address created in a numbered series rather than chosen once. None of this establishes who holds either account, only that these accounts present this name and that one of them carries a number an address in this index carries.
github.com/dreamtech777 — Chollima Hunter
https://github.com/dreamtech777
github profile IT Worker Fraud CURATED live
live
Source
-
Read on 20 September 2026 by searching GitHub for accounts whose display-name field carries a name this index already holds. The post that names this persona publishes no address and no code-hosting account for it, so both accounts here are new to the record. Exactly two accounts on GitHub display this name and neither handle resembles it. humble0415 was registered on 24 March 2022, states a bio offering senior back-end engineering, holds two repositories — one of them named TMG, and each created and last pushed on a single day — and has no followers and follows nobody. dreamtech777 was registered on 21 May 2025, holds no repositories at all, was last updated three minutes after it was created, has no followers and follows nobody, and publishes tylerminegar.top3@gmail.com on its profile. What raises this above a coincidence of display names is a number. The bulk IT-worker datasets this site already carries hold tylerminegar0415@gmail.com and tylerminegar7@gmail.com, and the two handles are humble0415 and dreamtech777. The 0415 in the first is the 0415 in an address this index already held, which is a value rather than a resemblance between two names, and the account displaying that name beside it is what makes the pair worth recording together. The third address is published by the account itself. Its .top3 suffix is the shape of an address created in a numbered series rather than chosen once. None of this establishes who holds either account, only that these accounts present this name and that one of them carries a number an address in this index carries.
github.com/dreamtech777 — Chollima Hunter
https://github.com/humble0415
github profile IT Worker Fraud CURATED live
live
Source
-
Read on 20 September 2026 by searching GitHub for accounts whose display-name field carries a name this index already holds. The post that names this persona publishes no address and no code-hosting account for it, so both accounts here are new to the record. Exactly two accounts on GitHub display this name and neither handle resembles it. humble0415 was registered on 24 March 2022, states a bio offering senior back-end engineering, holds two repositories — one of them named TMG, and each created and last pushed on a single day — and has no followers and follows nobody. dreamtech777 was registered on 21 May 2025, holds no repositories at all, was last updated three minutes after it was created, has no followers and follows nobody, and publishes tylerminegar.top3@gmail.com on its profile. What raises this above a coincidence of display names is a number. The bulk IT-worker datasets this site already carries hold tylerminegar0415@gmail.com and tylerminegar7@gmail.com, and the two handles are humble0415 and dreamtech777. The 0415 in the first is the 0415 in an address this index already held, which is a value rather than a resemblance between two names, and the account displaying that name beside it is what makes the pair worth recording together. The third address is published by the account itself. Its .top3 suffix is the shape of an address created in a numbered series rather than chosen once. None of this establishes who holds either account, only that these accounts present this name and that one of them carries a number an address in this index carries.
github.com/humble0415 — Chollima Hunter
https://x.com/amangus7
x account IT Worker Fraud RESEARCHER POST
Source
-
Named with three aliases; the post publishes no email or code-hosting account for this persona.
x.com/browsercookies/status/1991206980044877877 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1991206980044877877 — Cookie Connoisseur (@browsercookies)
- github.com/humble0415 — Chollima Hunter
- github.com/dreamtech777 — Chollima Hunter