Chollima Hunter

← Remote Workers

hellomooncity@gmail.com

hellomooncity@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from ketman.org and Kawaii Jong UwUn (HyperBuildX-Continued-Research). The earliest of those reports is dated 2025-10-01 and the most recent 2026-11-13.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-10-01 · last seen 2026-11-13

Sources

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Spotted a Weird Github Organization? It Might be DPRK! - Ketman - Threat intelligence for remote and open source organizations

ketman.org lists 47 other indicators in this source. 7 are shown, chosen across types.

All 48 indicators from this source

Cited by the same report: HyperBuildX-Continued-Research/HyperBuildX Follow-up.canvas at main · Kawaii-Jong-UWUn/HyperBuildX-Continued-Research · GitHub

Kawaii Jong UwUn (HyperBuildX-Continued-Research) lists 44 other indicators in this source. 5 are shown, chosen across types.

All 45 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.