mrdakluka5@gmail.com

mrdakluka5@gmail.com is an email address that one published source reports in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Narcass3 (@Narcass3). The report is dated 2026-07-08.

email address IT Worker Fraud RESEARCHER POST

First seen 2026-07-08 · last seen 2026-07-08

Source

  • DRC Team is not an operator identity. The thread describes it as a fraudulent freelancer facilitation service set up by a group of Serbians, which supplied DPRK IT workers with a Serbian mobile number, identities, laptops and payment systems, and which was hosted on an IP address behind a nondescript login page. The source states that a persona cost between 70 and 300 dollars and arrived with Payoneer, PayPal, Upwork and Freelancer accounts and a real identity, that non-VOIP mobile numbers were paired with Pushbullet and AirDroid so the workers could receive texts, and that more than 150 laptops were in use. The first two accounts are the ones the source says the administrator used for support; the rest it files under persona and payment information. These are the facilitators' accounts as the source presents them, not accounts attributed to any DPRK operator.
    x.com/Narcass3/status/2074856040525402531 — Narcass3 (@Narcass3) · under “DRC Team facilitation service” · published 2026-07-08 · pulled 2026-08-30

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: x.com/Narcass3/status/2074856040525402531

Narcass3 (@Narcass3) lists 7 other indicators in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.