codewarrier3000@gmail.com
codewarrier3000@gmail.com is an email address
that 4 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies), Chollima Hunter, tayvano (lazarus-bluenoroff-research) and The Raven File.
The earliest of those reports is dated 2025-05-17 and the most recent 2026-10-18.
The reporting files it under the persona codewarrier3000. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
email address IT Worker Fraud CURATED
Sources
-
Published on 17 May 2025 in a thread the researcher opened with "Lets play a profile picture game! Here are a few fun DPRK ITW/remote worker profile pics and their associated emails." Each post in it pairs one address with the profile photograph used alongside it. This entry is one such post: the address codewarrier3000@gmail.com and the picture below it. The photograph is mirrored here because these posts are the only published record of the face an operator presented, and the accounts they came from are routinely deleted. It is not evidence of who operates the address: a profile picture in this dataset is as likely to be generated, stock, or taken from an uninvolved person. The researcher gives no name, and the address does not read as one, so the page is filed under the address’s own local part rather than under a name invented for it.
x.com/browsercookies/status/1923880400398795089 — Cookie Connoisseur (@browsercookies) -
Found on 24 September 2026 by searching GitHub's commit index for published persona addresses and reading which account GitHub attributes the commits to. GitHub credits a commit to the account that has the signing address registered and verified, which only the holder of the mailbox can do, so an attributed account is one the address's holder controls, whichever repository the commits sit in and whenever the address was added. Counts are of the commits GitHub's search returns, up to 100. GitHub attributes 26 commits signed codewarrier3000@gmail.com, an address browsercookies publishes for this persona, to github.com/super-developer-king, account id 118246675, created on 15 November 2022, with 1 public repository.
github.com/super-developer-king — Chollima Hunter -
…Montero / Eugene Tan / TalentKingDev - Madrid - dove123_ - eugenetan0105 - expertvetted7 - TalentKingDev - codewarrier3000 - codewarrier3000@gmail.com - github.com/TalentKingDev - linkedin.com/in/jvmontero-35/ - lucky.godness.tan@gmail.com - t.me/expertvetted7 (ID: 7030416097) •…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) -
…odev0113@gmail.com cocokingdom27@gmail.com codechef730@gmail.com codefan0915@gmail.com codegenerator1994@gmail.com codemaster9428@gmail.com codewarrier3000@gmail.com codewaterhole@gmail.com codingmaster316@Gmail.com coffee.to.code.dev@gmail.com colleendlgd@gmail.com comantivirus250@gmail.com comma0517@gm…
Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.