Zheng Cheng
Also reported as: zhengcheng129
A fabricated professional identity used in the DPRK remote IT-worker scheme. Everything below is transcribed from the cited post, in which a named researcher attributes these accounts to a single operator, Zheng Cheng. The attribution is theirs, not this site's.
Profile picture used by the X account, cropped from the screenshot published in the cited post. It is the image the account presented as itself, and is not necessarily a photograph of the person operating it.
Identifiers attributed to this persona
4 indicators the source attributes to this operator, each with its sources.
| Indicator | Type | Account status |
|---|---|---|
Zheng Cheng |
alias | |
zhengcheng129@outlook.com |
email address | |
live:zhengcheng129 |
skype account | |
https://x.com/zhengcheng129 |
x account |
Zheng Cheng
alias IT Worker Fraud RESEARCHER POST
Source
-
The address is re-fanged from "zhengcheng129 at outlook", where the post's own label supplies the domain. Transcribed by hand from the screenshots in the cited post, read at full resolution. The profile capture shows the display name Zheng Cheng over the handle zhengcheng129, a headline of Mobile & Web Developer, a stated location of Liaoning, an account created in August 2017, and 3 following against 1 follower. The post carries a second image, a portrait of a different and older man, under the words "Guess whoooo". The post does not say who that portrait depicts, so it is not published here and no claim is made about it.
x.com/browsercookies/status/1943445193723707693 — Cookie Connoisseur (@browsercookies)
zhengcheng129@outlook.com
email address IT Worker Fraud RESEARCHER POST
Source
-
The address is re-fanged from "zhengcheng129 at outlook", where the post's own label supplies the domain. Transcribed by hand from the screenshots in the cited post, read at full resolution. The profile capture shows the display name Zheng Cheng over the handle zhengcheng129, a headline of Mobile & Web Developer, a stated location of Liaoning, an account created in August 2017, and 3 following against 1 follower. The post carries a second image, a portrait of a different and older man, under the words "Guess whoooo". The post does not say who that portrait depicts, so it is not published here and no claim is made about it.
x.com/browsercookies/status/1943445193723707693 — Cookie Connoisseur (@browsercookies)
live:zhengcheng129
skype account IT Worker Fraud RESEARCHER POST
Source
-
The address is re-fanged from "zhengcheng129 at outlook", where the post's own label supplies the domain. Transcribed by hand from the screenshots in the cited post, read at full resolution. The profile capture shows the display name Zheng Cheng over the handle zhengcheng129, a headline of Mobile & Web Developer, a stated location of Liaoning, an account created in August 2017, and 3 following against 1 follower. The post carries a second image, a portrait of a different and older man, under the words "Guess whoooo". The post does not say who that portrait depicts, so it is not published here and no claim is made about it.
x.com/browsercookies/status/1943445193723707693 — Cookie Connoisseur (@browsercookies)
https://x.com/zhengcheng129
x account IT Worker Fraud RESEARCHER POST
Source
-
The address is re-fanged from "zhengcheng129 at outlook", where the post's own label supplies the domain. Transcribed by hand from the screenshots in the cited post, read at full resolution. The profile capture shows the display name Zheng Cheng over the handle zhengcheng129, a headline of Mobile & Web Developer, a stated location of Liaoning, an account created in August 2017, and 3 following against 1 follower. The post carries a second image, a portrait of a different and older man, under the words "Guess whoooo". The post does not say who that portrait depicts, so it is not published here and no claim is made about it.
x.com/browsercookies/status/1943445193723707693 — Cookie Connoisseur (@browsercookies)
Sources
- x.com/browsercookies/status/1943445193723707693 — Cookie Connoisseur (@browsercookies)