masculus1114@gmail.com

masculus1114@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-04-08.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-08-19 · last seen 2026-04-08

Sources

  • Nearby text:

    …ok.com luckyman012357@gmail.com luckysmile0502@gmail.com lunadev823@gmail.com lyappunov19@outlook.com magnus.masculus971114@gmail.com masculus1114@gmail.com mateomuhannad@gmail.com maxwellreshel0709@outlook.com mr.new0509@gmail.com mykytafullstack@gmail.com naruhitokaide@gmail.com nektario…
    Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog — Group-IB · under “Email Indicators” · published 2026-04-08 · pulled 2026-08-30
  • Nearby text:

    …peon@proton.me mark.palmer11892@gmail.com markdecorbins@gmail.com markovicstef998@gmail.com martsangel017@gmail.com marynashavkun@gmail.com masculus1114@gmail.com masonrose622@gmail.com masraven93@gmail.com master.jupitor@gmail.com master97216@gmail.com mastering0429@gmail.com matchingcube@gmail.com m…
    Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog

Group-IB lists 105 other indicators in this source. 7 are shown, chosen across types.

All 106 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.