mattsanchez801@gmail.com
mattsanchez801@gmail.com is an email address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies) and Chollima Hunter.
The earliest of those reports is dated 2025-06-30 and the most recent 2025-07-24.
The reporting files it under the persona Matthew Brian Sanchez, alongside 3 other identifiers attributed to the same identity. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
email address IT Worker Fraud CURATED
Sources
-
The post lists these together as one operator's accounts without naming the operator. It also names GitHub CryptoDev9975 as already returning 404, and Slack workspaces dahai-workspace and johnsteam-xun7742, for which there is no extractor.
x.com/browsercookies/status/1948454709012169187 — Cookie Connoisseur (@browsercookies) -
… Victoria, Texas (318) 734-8197 matt.sanchez801@gmail.com https://www.linkedin.com/in/matthew-sanchez-115300308/ …
Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 30 June 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address matt.sanchez801@gmail.com is what tied the listing to this site's index: it appears in a post by Cookie Connoisseur (@browsercookies) on X listing it among one operator's accounts without naming the operator. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
pipu.cc/en/item_detail.php?item_id=4052 — Chollima Hunter
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.