jimmynet444@outlook.com
jimmynet444@outlook.com is an email address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Hunter and DTEX Systems.
The earliest of those reports is dated 2025-05-14 and the most recent 2026-09-20.
email address IT Worker Fraud CURATED
Sources
-
Read on 20 September 2026 by walking the commit history of every repository on github.com/admin-0123, github.com/dtorres314, github.com/Iyk-Tech22, github.com/minionhub, github.com/jimmynet444, github.com/bitcrusher1023, github.com/elegant-idn, which this index already holds under the heading "Accounts tied to the mr.new0509 address by email reuse". Tallying the author line on every commit recovers the address the holder configured their git client with, which an account never has to state anywhere. am.dev.8080@gmail.com authored 1125 commits on admin-0123, commits as "admin-0123"; trustme000777@gmail.com authored 842 commits on dtorres314, commits as "dtorres"; ikechukwugodwin22@yahoo.com authored 598 commits on Iyk-Tech22, commits as "Iyk-Tech"; minionhub.dev@gmail.com authored 308 commits on minionhub, commits as "minion"; jimmynet444@outlook.com authored 109 commits on jimmynet444, commits as "jimmynet444"; williamjackson0123@outlook.com authored 81 commits on admin-0123, commits as "admin-0123"; bitcrusher1023@outlook.com authored 62 commits on bitcrusher1023, commits as "bitcrusher1023"; elegant.idn65@gmail.com authored 9 commits on elegant-idn, commits as "elegant-idn"; bitcrusher1023@gmail.com authored 3 commits on bitcrusher1023, commits as "bitcrusher1023"; robinson.james0427@gmail.com authored 2 commits on minionhub, commits as "minionhub"; brainbrace1@outlook.com authored 1 commit on Iyk-Tech22, commits as "Iyk-Tech". Each is admitted because it commits under a name the account itself uses, the test that separates the holder's own address from the original author of a repository copied in. No persona is attached, because the accounts these were read from carry none: the reporting grouped them without naming an operator, and recovering an address does not supply the name it declined to give.
github.com/jimmynet444 — Chollima Hunter -
Per DTEX's own advisory text: these IOCs are NOT indicative of a confirmed North-Korea-attributed hack — they may have associations with IT-worker operations and require further investigation if observed in your environment. Any connection to actual persons may be deliberate (an operator using a real person's identity) or incidental, and the actual owner of an email account listed here may be unaware their address is associated with this IOC list. Do not treat presence on this list as proof of wrongdoing by the account holder.
i3 Threat Advisory: Identifying North Korean IT Workers: Key Threat Indicators — DTEX Systems
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.