morojojoizel@gmail.com
morojojoizel@gmail.com is an email address
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from GitLab Threat Intelligence.
The report is dated 2026-02-19.
email address IT Worker Fraud RESEARCHER POST
Source
-
Read from GitLab's screenshot of the Beijing cell's ledger of deposits and withdrawals for November 2025, in the first case study (the cell GitLab assesses Kang Kil Nam manages). hittapa9@outlook.com is the destination of a transfer to Wise; hittapa9@gmail.com, which GitLab lists in its appendix, is in the same sheet. morojojoizel@gmail.com appears among the sheet's receiving accounts and beside a rated freelance-platform plan. Neither address is in the report's appendix table, so both rest on the screenshot alone. A third address in the same sheet, attached to a transfer to a named individual, is held back: GitLab warns that the people a cell works through may include unwitting facilitators and victims of identity theft.
about.gitlab.com/blog/gitlab-threat-intelligence-reveals-north-korean-tradecraft/ — GitLab Threat Intelligence
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.