karrem1281@outlook.sa

karrem1281@outlook.sa is an email address that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Cookie Connoisseur (@browsercookies). The report is dated 2025-04-23.

The reporting files it under the persona cryptostar7. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.

email address IT Worker Fraud RESEARCHER POST

First seen 2025-04-23 · last seen 2025-04-23

Source

  • The account name is transcribed by hand from the attached screenshot of the GitHub profile page, which carries the handle cryptostar7 and describes the holder as a freelancer and job seeker working in blockchain. The address karrem1281@outlook.sa is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
    x.com/browsercookies/status/1915111997353439448 — Cookie Connoisseur (@browsercookies) · under “cryptostar7” · published 2025-04-23 · pulled 2026-08-30

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: x.com/browsercookies/status/1915111997353439448

Cookie Connoisseur (@browsercookies) lists 1 other indicator in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.