narutohiro098@gmail.com
narutohiro098@gmail.com is an email address
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from tanuki42 (@tanuki42_).
The report is dated 2026-04-14.
The reporting files it under the persona Taro Aikuchi, alongside 24 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
email address IT Worker Fraud RESEARCHER POST
Source
-
Applicant who approached the researcher for a remote engineering role and was assessed by them as a DPRK IT worker. The researcher reports a LinkedIn account created in 2025 with no photograph, an AI-generated CV listing a degree that does not exist and an email address different from the one the application came from, a Telegram account posting to recruit facilitators willing to supply Upwork accounts and stand in for KYC, a GitHub account created in 2025 whose commits carry a third address and among whose repository contributors are accounts the researcher had previously encountered, a connection to the interview from an AstrillVPN address, and a Japanese My Number card the researcher and a consulted specialist assessed as a forgery. Running the three addresses through an OSINT service returned accounts registered under four further names and locations inconsistent with a Japanese national. Both the LinkedIn and the GitHub account were deleted after the interview. The post that carries that OSINT result was itself never cited here until 16 September 2026, and two of the accounts it shows are typeable. The LinkedIn card for Pavlo Polishichuk gives the account name pavlo-polishichuk-b68920364 and a biography in Ukrainian reading Posada Full-stack Developer u Freelancer; the post's own summary places that identity in Poland while the card places it in Shpola, Cherkasy, in Ukraine, and the card is what is recorded. The John Ruff identity is a resume hosted on bubble.io whose indexed preview carries a United States telephone number beside the highgoal215 address already held here, which is what ties the number to this persona rather than to a separate one. The Master Dev identity is a Microsoft account created on 3 November 2025 and registered to France, with only a masked telephone number shown.
x.com/tanuki42_/status/2044106367028605422 — tanuki42 (@tanuki42_)
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.