truepartner312@gmail.com
truepartner312@gmail.com is an email address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from ketman.org.
The earliest of those reports is dated 2025-04-16 and the most recent 2025-06-24.
email address IT Worker Fraud MATCHED IN SOURCE
Sources
-
…Please download the video to watch. Notice, Motoki is using the same e-mail address truepartner312@gmail.com as address connected to the kirbyAttack actor. We proved that motokimasuo and kirbyattack accounts are working in coordination with…
DPRK IT Workers in Open Source and Freelance Platforms - Ketman - Threat intelligence for remote and open source organizations — ketman.org -
…This exposed his login process into a Gmail account truepartner312@gmail.com — an address unlinked to the identity he had previously disclosed, further reinforcing the use of a false persona and layered alias…
Understanding DPRK IT Worker Activity - Conversations and Insights - Ketman - Threat intelligence for remote and open source organizations — ketman.org
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.
Related indicators
Cited by the same report: DPRK IT Workers in Open Source and Freelance Platforms - Ketman - Threat intelligence for remote and open source organizations
All 40 indicators from this source