← Remote Workers

johnwilliam199024@gmail.com

johnwilliam199024@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud and Moonstone Sleet activity, which public reporting attributes to North Korea (DPRK). It is cited here from tayvano (lazarus-bluenoroff-research) and Chollima Group. The earliest of those reports is dated 2025-08-25 and the most recent 2026-10-18.

email address IT Worker FraudMoonstone Sleet MATCHED IN SOURCE

First seen 2025-08-25 · last seen 2026-10-18

Sources

• Nearby text:

  …loganworld002@gmail.com - akp707d@gmail.com - websolution0524@gmail.com - smirnovvvasyl@gmail.com - rgrobertclark032@gmail.com - johnwilliam199024@gmail.com - github.com/loganworld - github.com/logan-smith-cloud - github.com/jeevan8888 - github.com/smirnovvvasyl - t.me/defiworld_dev (ID:…

  DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “loganworld / Logan Lee / Logan King / Logan Smith” · published 2025-06-19 · pulled 2026-08-30

• Nearby text:

  …websolution0524@gmail.com[email protected] smirnovvvasyl@gmail.com[email protected] rgrobertclark032@gmail.com[email protected] johnwilliam199024@gmail.com[email protected]…

  Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group — Chollima Group · under “IOCs.” · published 2025-08-25 · pulled 2026-09-11

• Nearby text:

  …oganlee002@gmail.com loganworld002@gmail.com akp707d@gmail.com websolution0524@gmail.com smirnovvvasyl@gmail.com rgrobertclark032@gmail.com johnwilliam199024@gmail.com Github: github.com/loganworld github.com/logan-smith-cloud github.com/jeevan8888 github.com/smirnovvvasyl Telegram: defiworld_dev loganwo…

  Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group — Chollima Group · under “IOCs.” · published 2025-08-25 · pulled 2026-10-18

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 7 are shown, chosen across types.

• https://calendly.com/codeninja819 Calendly account
• https://dev.to/david_wenske_0b5dfdc82e27 DEV Community account
• joshupgig@gmail.com email address
• https://fiverr.com/derekmiller03 Fiverr account
• https://freelancer.com/u/esoh0612 Freelancer.com account
• https://freelancermap.com/profile/denis-rudink freelancermap account
• https://github.com/lovelydev829 GitHub account

All 855 indicators from this source

Cited by the same report: Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group

Chollima Group lists 109 other indicators in this source. 5 are shown, chosen across types.

• https://github.com/sasukeuchiha GitHub account
• 45.126.3.252 IP address
• https://laborx.com/freelancers/users/id328992 LaborX account
• https://www.linkedin.com/in/brent-jeremy/ LinkedIn account
• live:.cid.f4e6d1509205ccdd Skype account

All 110 indicators from this source