devking877@gmail.com

devking877@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-04-08.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-08-19 · last seen 2026-04-08

Sources

  • Nearby text:

    …gmail.com daren.shamoun28@gmail.com dejanteofilovic2@gmail.com dejanteofilovicup@gmail.com dev@flosports.tv developer789222@gmail.com devking877@gmail.com devondeveloper99@gmail.com fantasy971114@gmail.com ferix.moore@gmail.com freshtinygrow@gmail.com geniusdev1108@gmail.com goldendev726…
    Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog — Group-IB · under “Email Indicators” · published 2026-04-08 · pulled 2026-08-30
  • Nearby text:

    …ermajazvec@gmail.com devexpert1879@gmail.com devgroup006+1@gmail.com devgroup006@gmail.com devguru13580@gmail.com devilhacker0119@gmail.com devking877@gmail.com devknight216@gmail.com devlord0625@gmail.com devmania0522@gmail.com devmania1223@gmail.com devmaster929@gmail.com devope08@gmail.com devpho…
    Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog

Group-IB lists 105 other indicators in this source. 7 are shown, chosen across types.

All 106 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.