`takutictech518@gmail.com`

takutictech518@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Heiner García and ketman.org. The earliest of those reports is dated 2025-04-16 and the most recent 2025-04-20.

email address IT Worker Fraud MATCHED IN SOURCE

Listed as takutic.tech518@gmail.com

First seen 2025-04-16 · last seen 2025-04-20

Sources

Heiner García's article of 20 April 2025, read in full from its raw text, links a network of GitHub accounts to the Wagemole campaign through their handles, profile images, coordinated commits and requests to join community organisations, and closes with an Indicators of Compromise section listing eight email addresses and 214 GitHub accounts. The accounts here are that list, less the 49 it separately calls farmed, less those this index already holds, and less eleven that present as real developers. The body names the other values: the Telegram handles sasuke310 and spmoed and the sites sasuke.dev, spmoe.xyz and shiny-dev.com for the ShinySyntax and spmoe identity; motokimasuo.com for motokimasuo; iwakihiroto.info, the LinkedIn and Fiverr profiles under the name Hiroto Iwaki for mymiracle0118; the portfolio sites of vuedev2113 and OnlyForward0613 and the two X accounts OnlyForward0613 uses. The organisations and projects the accounts joined or targeted, among them dev-protocol, EddieHub, ProductShare DAO, TaraSwap and Stellar Foundation repositories, are named in the article as targets and are not carried.
medium.com/coinmonks/unmasking-suspicious-github-activity-the-wagemole-campaign-and-its-links-to-dprk-threat-actors-248e7901de38 — Heiner García · under “GitHub accounts and addresses in the Wagemole article (Heiner García)” · published 2025-04-20 · pulled 2026-08-30
Nearby text:

…vincenzagiorgi6@gmail.com pwlkjakub@gmail.com gru.dev259007@gmail.com toptall.cook@gmail.com kallis0312@gmail.com takutic.tech518@gmail.com williamduncan91413@gmail.com Identities Lucas Chang Hiroto Iwaki Taku Yamamoto Motoki Masuo Aiden Wong Ruslan…
DPRK IT Workers in Open Source and Freelance Platforms - Ketman - Threat intelligence for remote and open source organizations — ketman.org · under “Email Addresses” · published 2025-04-16 · pulled 2026-08-30

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: medium.com/coinmonks/unmasking-suspicious-github-activity-the-wagemole-campaign-and-its-links-to-dprk-threat-actors-248e7901de38

Heiner García lists 147 other indicators in this source. 7 are shown, chosen across types.

All 148 indicators from this source

Cited by the same report: DPRK IT Workers in Open Source and Freelance Platforms - Ketman - Threat intelligence for remote and open source organizations

ketman.org lists 39 other indicators in this source. 5 are shown, chosen across types.

All 40 indicators from this source