sallamy2580@gmail.com
sallamy2580@gmail.com is an email address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies) and tayvano (lazarus-bluenoroff-research).
The earliest of those reports is dated 2025-04-21 and the most recent 2026-10-18.
The reporting files it under the persona SuperPolaris, alongside 9 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
The post writes the operator's principal name three ways, as Superpol@ris, Superpol@irs and Superpol@rtis, with an @ standing in for a letter, and glosses the first of them as SuperPolaris. It states that the account ares-dev05 links to this identity rather than that the two are the same person.
x.com/browsercookies/status/1914448038128705613 — Cookie Connoisseur (@browsercookies) -
…Akimoto Akira - Richard Steward - Richard Stewart - Superpol@irs - 104654833+sallamy2580@users.noreply.github.com: - sallamy2580 - sallamy2580@gmail.com - https://github.com/sallamy2580 -  -  --- ## Face Pix #### 139.5.157.128 and…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research)
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.
Related indicators
Same persona record: SuperPolaris
All 9 on the SuperPolaris page
Cited by the same report: x.com/browsercookies/status/1914448038128705613
All 8 indicators from this source