Chollima Hunter

← Remote Workers

ellisfleming574@gmail.com

ellisfleming574@gmail.com is an email address that 2 published sources report in connection with Contagious Interview, Lazarus Group and PolinRider activity, which public reporting attributes to North Korea (DPRK). It is cited here from OpenSourceMalware and Abstract Security. The earliest of those reports is dated 2025-11-29 and the most recent 2026-01-20.

email address Contagious InterviewLazarus GroupPolinRider MATCHED IN SOURCE

First seen 2025-11-29 · last seen 2026-01-20

Sources

  • …two commits from September 8 and November 10, 2025. GitHub Users: - m/markomilivojevic - James Smith Email Addresses: - James Smith <ellisfleming574@gmail.com> - Marko Milivojevic <milivojemarko@gmail.com> Domains: - vscode-bootstrapper.vercel.app ## Variant six - September 8, 2025 - Unique…
    DPRK Contagious Interview Malware Weaponizes Microsoft VSCode Tasks | OpenSourceMalware — OpenSourceMalware · under “Multiple versions of this campaign” · published 2025-11-29 · pulled 2026-09-12

  • Nearby text:

    …repository desarrollovba@gmail.com Commits to malicious repository dev_group@outlook.com Commits to malicious repository ellisfleming574@gmail.com Commits to malicious repository eros.fabrici@gmail.com Commits to malicious repository ethvault20251129@outlook.com Commits to…
    Contagious Interview: Tracking the VS Code Tasks Infection Vector — Abstract Security · under “Commit Author Emails” · published 2026-01-20 · pulled 2026-09-12

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: DPRK Contagious Interview Malware Weaponizes Microsoft VSCode Tasks | OpenSourceMalware

OpenSourceMalware lists 55 other indicators in this source. 7 are shown, chosen across types.

All 56 indicators from this source

Cited by the same report: Contagious Interview: Tracking the VS Code Tasks Infection Vector

Abstract Security lists 33 other indicators in this source. 5 are shown, chosen across types.

All 34 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.