`cryptoapple1109@gmail.com`

cryptoapple1109@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research) and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-10-18.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-08-19 · last seen 2026-10-18

Sources

Nearby text:

…that at some point prior to May 14th, his Github profile was deleted[6]. ### OneDev0411 - OneDev0411 - https://github.com/OneDev0411 - cryptoapple1109@gmail.com - 104505361+OneDev0411@users.noreply.github.com - describes himself as a "Full Stack Web Engineer"[7].…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “OneDev0411” · published 2025-06-19 · pulled 2026-08-30
Nearby text:

…103@gmail.com creativecode0217@gmail.com cristianorodriguez779@gmail.com cronus.diamond@gmail.com crowdworks@teml.net crownnp1016@gmail.com cryptoapple1109@gmail.com crystal20050819@gmail.com crystalmaster0130@gmail.com crystalpower19991222@gmail.com cui.angela.heqian@gmail.com cupid.bow0301@gmail.com cu…
Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 7 are shown, chosen across types.

All 855 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source