codingninjaprox@gmail.com
codingninjaprox@gmail.com is an email address
that one published source reports
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Cookie Connoisseur (@browsercookies).
The report is dated 2025-04-21.
The reporting files it under the persona ares-dev05. The persona page shows them together with any accounts, photographs and CV recorded under that name. A persona name is the one an account presented under, and may belong to an uninvolved person whose identity was taken.
email address IT Worker Fraud RESEARCHER POST
Source
-
The account name is transcribed by hand from the screenshot attached to the post, a GitHub profile page carrying the handle ares-dev05 under the display name Full Stack Developer. The post states the account has direct links to Kan Bei, also known as Karl Chong, and cites Nisos research on that actor. The address codingninjaprox@gmail.com is the dominant author on the commits in this account's own GitHub repositories, recovered 2026-09-12; it is the operator's own commit address, not a forked repo's upstream author.
x.com/browsercookies/status/1914447327974318298 — Cookie Connoisseur (@browsercookies)
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.