Chollima Hunter

← Remote Workers

erosfabrici@gmail.com

erosfabrici@gmail.com is an email address that 2 published sources report in connection with Contagious Interview and Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Abstract Security and OpenSourceMalware. The earliest of those reports is dated 2025-11-29 and the most recent 2026-01-20.

email address Contagious InterviewLazarus Group MATCHED IN SOURCE

Listed as eros.fabrici@gmail.com

First seen 2025-11-29 · last seen 2026-01-20

Sources

  • Nearby text:

    …repository dev_group@outlook.com Commits to malicious repository ellisfleming574@gmail.com Commits to malicious repository eros.fabrici@gmail.com Commits to malicious repository ethvault20251129@outlook.com Commits to malicious repository ezraloomis.gears@gmail.com Commits to…
    Contagious Interview: Tracking the VS Code Tasks Infection Vector — Abstract Security · under “Commit Author Emails” · published 2026-01-20 · pulled 2026-09-14

  • Nearby text:

    …repo was published today December 1, 2025 GitHub Users: - eferos93 - andrew_watson - koinos-finance Email Addresses: - Eros Fabrici <eros.fabrici@gmail.com> - John Desmet <johndesmet814@gmail.com> - andrew_watson <andrew_watson@koinos.us> Domains: - vscode-bootstrapper.vercel.app ##…
    DPRK Contagious Interview Malware Weaponizes Microsoft VSCode Tasks | OpenSourceMalware — OpenSourceMalware · under “Multiple versions of this campaign” · published 2025-11-29 · pulled 2026-09-27

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Contagious Interview: Tracking the VS Code Tasks Infection Vector

Abstract Security lists 33 other indicators in this source. 7 are shown, chosen across types.

All 34 indicators from this source

Cited by the same report: DPRK Contagious Interview Malware Weaponizes Microsoft VSCode Tasks | OpenSourceMalware

OpenSourceMalware lists 55 other indicators in this source. 5 are shown, chosen across types.

All 56 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.