naruhitokaide@gmail.com

naruhitokaide@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB and The Raven File. The earliest of those reports is dated 2025-08-19 and the most recent 2026-04-08.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2025-08-19 · last seen 2026-04-08

Sources

  • Nearby text:

    …gmail.com masculus1114@gmail.com mateomuhannad@gmail.com maxwellreshel0709@outlook.com mr.new0509@gmail.com mykytafullstack@gmail.com naruhitokaide@gmail.com nektarioskampourakis571@gmail.com nicolas.edgardo1028@gmail.com oleksandr.sytnikov0413@gmail.com oliwerpalm@outlook.com progdev77@gmai…
    Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog — Group-IB · under “Email Indicators” · published 2026-04-08 · pulled 2026-08-30
  • Nearby text:

    …a007@gmail.com mysterystarter+1@outlook.com nakaoakira.pop@gmail.com nalpa199858@gmail.com nalyah.avra@madeforthat.org napsisapso@gufum.com naruhitokaide@gmail.com nasi.vaden@minofangle.org nazarnesterov21428@gmail.com nbecker194@gmail.com nemanja.dev210@gmail.com netstarkinguser@gmail.com newssstrike@…
    Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags — The Raven File · under “CONCLUSION” · published 2025-08-19 · pulled 2026-09-01

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Cyber Saga: In the Footsteps of the DPRK IT Workers | Group-IB Blog

Group-IB lists 105 other indicators in this source. 7 are shown, chosen across types.

All 106 indicators from this source

Cited by the same report: Unmasking DPRK IT Workers: Email Address Patterns as Hiring Red Flags

The Raven File lists 1,741 other indicators in this source. 5 are shown, chosen across types.

All 1,742 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.