adevcontact0514@gmail.com
adevcontact0514@gmail.com is an email address
that 2 published sources report
in connection with Contagious Interview and IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from meow mfer (@meow_mfer) and Chollima Hunter.
The earliest of those reports is dated 2025-08-11 and the most recent 2026-09-24.
email address Contagious InterviewIT Worker Fraud CURATED
Sources
-
A fake recruiter approached the researcher on LinkedIn while impersonating the Bitgesell project, then sent a take-home coding assignment hosted in a private Bitbucket organisation. The researcher describes the assignment's backend as contacting an external URL on startup and executing whatever code it receives, which is a remote-code-execution backdoor disguised as middleware. The registration dates are the researcher's own evidence for the impersonation: the post states that bitgesell.co was registered on 9 August 2025, the day before the approach, while the project's official site was registered in April 2020. A second domain, bitgesell.finance, appeared a day later with the same hire@ address pattern. The hashes are reproduced from the researcher's own indicator list for the assignment repository.
x.com/meow_mfer/status/1954700258132557907 — meow mfer (@meow_mfer) -
Found on 24 September 2026 by searching GitHub's commit index for published persona addresses and reading which account GitHub attributes the commits to. GitHub credits a commit to the account that has the signing address registered and verified, which only the holder of the mailbox can do, so an attributed account is one the address's holder controls, whichever repository the commits sit in and whenever the address was added. Counts are of the commits GitHub's search returns, up to 100. GitHub attributes 23 commits signed a.dev.contact0514@gmail.com, an address meow_mfer publishes for this group, to the login blackbear0112, which no longer resolves.
github.com/blackbear0112 — Chollima Hunter
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.