aaronhirotobm@gmail.com
aaronhirotobm@gmail.com is an email address
that 2 published sources report
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Chollima Hunter and Hacking But Legal.
The earliest of those reports is dated 2026-07-15 and the most recent 2026-09-28.
email address Contagious Interview CURATED
Listed as aaronhiroto.bm@gmail.com
Sources
-
Found on 28 September 2026 by reading every commit author in the 39 impersonation-company lure repositories filed the same day. Leaving out three long-established developers whose projects the lures copy (their commits are the copied history), every other author account now returns 404: GitHub has removed them, in a batch whose names follow farm patterns (CodeBlock and a number, aitechbuild and a number, 0xroaman-N, GitWorkHub8 and 9, williamwagle1 to 14, gitworkspace17, everdreamsoft variants) and whose addresses are plus-addressed Gmail variants and look-alike company domains (remotely-limitbreak.com, celestium.store and celestium.exchange, lukso.bet, everdream-soft.com, astrabytesync.com). Each address is carried with the account GitHub credits it to, which is the account that registered it. Four addresses at domains that may belong to real businesses are left out, though the accounts that used them are carried.
github.com/GitWorkHub8 — Chollima Hunter -
…, webvlada2024@gmail.com , randhawamanpreet37@gmail.com , ignusmart@gmail.com , mjlescano@protonmail.com , Pourcheriki@gmail.com , aaronhiroto.bm@gmail.com , lxin6793@gmail.com .…
North Korea Is Hiring — Hacking But Legal
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.
Related indicators
Cited by the same report: github.com/GitWorkHub8
All 113 indicators from this source