Episode

EP 133 — I'm the Real Connor

02 May 2023 Official episode · Official transcript

cybercrime

The episode features Connor Tumbleson's account of having his identity, résumé, GitHub history, and other professional information used to create fake freelance profiles and impersonate him in job interviews.

Topics: Identity impersonation using professional and public online information, Fabricated LinkedIn and Upwork profiles, Impersonation during remote video job interviews, Use of genuine and altered résumé, certification, address, photograph, and GitHub data, Recruitment and coordination through GitHub, email, Slack, and Upwork, Long-term GitHub commit history as an identity and reputation signal, Fake business websites and reused web-analytics identifiers, Remote-work fraud and outsourcing of contracted technical work, Mouse-jigglers and other productivity-appearance techniques, Verification of remote job applicants and claimed identities

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (31)

Claims (19)

Qualified statements from this episode, not graph facts.

Connor Tumbleson USES GitHub

Connor publishes and maintains programming code on GitHub, with a long history of contributions.

Explicit Confidence 99% · Jack Rhysider EP 133 Details

“Connor has published a lot of this code to GitHub”

Jack Rhysider · offsets 3339–3388

Connor Tumbleson identity impersonation INVOLVES identity impersonation

The incident involved someone pretending to be Connor Tumbleson and using his identity.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“it was someone trying to pretend they were me”

Connor Tumbleson · offsets 5308–5353

Connor Tumbleson identity impersonation INVOLVES fake online profiles

The incident involved fake online profiles created with Connor's personal and professional information.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“it was a fake Upwork of me”

Connor Tumbleson · offsets 17534–17560

Connor Tumbleson identity impersonation INVOLVES professional-profile harvesting

Connor believed that other people's information was harvested to create realistic employment profiles.

Uncertain Confidence 96% · Connor Tumbleson EP 133 Details

“their information was harvested to make a real-looking profile”

Connor Tumbleson · offsets 28352–28414

Connor Tumbleson identity impersonation INVOLVES remote interview impersonation

A person using Connor's identity joined and conducted a remote job interview.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“someone pretending to be me in an interview later today”

Connor Tumbleson · offsets 11240–11294

Connor Tumbleson identity impersonation INVOLVES Andrew

Andrew discovered the impersonation scheme, declined to pretend to be Connor, and provided Connor with evidence.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“Andrew just ends up leaving and taking a bunch of information with him”

Connor Tumbleson · offsets 10952–11022

Connor Tumbleson identity impersonation INVOLVES PND

PND instructed Andrew to pretend to be Connor for a job interview and directed activity in a Slack channel.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“PND person is a acronym. Ends up posting to Andrew and says, hey, you’re gonna pretend to be this person”

Connor Tumbleson · offsets 10438–10542

Connor Tumbleson identity impersonation INVOLVES Maris

Maris was presented as the person hiring Andrew, although Connor later suspected that the person communicating as Maris was also an impersonator.

Uncertain Confidence 96% · Connor Tumbleson EP 133 Details

“The person Andrew is talking to is not even Maris, because Maris is just another impersonated individual”

Connor Tumbleson · offsets 20512–20616

PND POSSIBLY_SAME_AS Maris

Connor says PND might also be Maris, but does not establish that they are the same person.

Uncertain Confidence 94% · Jack Rhysider EP 133 Details

“PND might also be Maris. I don’t know”

Jack Rhysider · offsets 20894–20931

PND ASSOCIATED_WITH PND Design

PND was associated with PND Design, although the episode questions whether the affiliation was genuine or itself an impersonation.

Uncertain Confidence 90% · Jack Rhysider EP 133 Details

“PND has a website called PND Design”

Jack Rhysider · offsets 20951–20986

PND Design USES Google Analytics

Websites attributed to PND Design reportedly shared the same Google Analytics ID.

Explicit Confidence 94% · Connor Tumbleson EP 133 Details

“they had the same Google Analytics ID”

Connor Tumbleson · offsets 22829–22866

Connor Tumbleson identity impersonation INVOLVES GitHub

Connor's GitHub profile and coding history were used as attractive source material for the impersonation.

Explicit Confidence 90% · Connor Tumbleson EP 133 Details

“Someone ... saw Connor’s GitHub and liked it, and that’s why they took his identity”

Connor Tumbleson · offsets 33280–33362

Connor Tumbleson identity impersonation INVOLVES Upwork

A fake Upwork profile using Connor's information was used to apply for real jobs.

Explicit Confidence 99% · Jack Rhysider EP 133 Details

“Someone made an Upwork profile using Connor’s resume and information”

Jack Rhysider · offsets 17983–18051

Connor Tumbleson identity impersonation INVOLVES Slack

The participants coordinated and exchanged instructions and evidence through Slack channels.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“screenshots of all these Slack channels”

Connor Tumbleson · offsets 19820–19859

Connor Tumbleson identity impersonation INVOLVES Zoom

The impersonator joined the job interview through Zoom.

Explicit Confidence 99% · Connor Tumbleson EP 133 Details

“It, of course, had the Zoom link”

Connor Tumbleson · offsets 12274–12306

Connor Tumbleson identity impersonation INVOLVES Zillow

The impersonated materials included an address that was for sale on Zillow near Connor's location.

Explicit Confidence 98% · Connor Tumbleson EP 133 Details

“the address was a address that was for sale on Zillow kind of right around where I live”

Connor Tumbleson · offsets 5410–5497

r/overemployed USES mouse-jigglers

The r/overemployed community discusses using mouse-jigglers to appear productive while away from a keyboard.

Explicit Confidence 98% · Jack Rhysider EP 133 Details

“having mouse-jigglers move your mouse around for you”

Jack Rhysider · offsets 35126–35178

John Wu ASSOCIATED_WITH North Korea

Jack says John Wu believed that someone from North Korea may have applied for a job in order to steal cryptocurrency; this is presented as a possibility, not a confirmed attribution.

Uncertain Confidence 82% · Jack Rhysider EP 133 Details

“he thinks that someone from North Korea tried applying for a job”

Jack Rhysider · offsets 36091–36155

Connor Tumbleson identity impersonation ASSOCIATED_WITH PND

Connor and Jack suspect PND may be connected to the identity-impersonation activity, but the episode does not establish PND's identity or role with certainty.

Uncertain Confidence 78% · Jack Rhysider EP 133 Details

“Someone, I don’t know, PND, Maris, saw Connor’s GitHub and liked it, and that’s why they took his identity”

Jack Rhysider · offsets 33826–33932

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:54:20.274510+00:00