`topdev1228@protonmail.com`

topdev1228@protonmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Group and tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2024-10-01 and the most recent 2026-10-18.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2024-10-01 · last seen 2026-10-18

Sources

Nearby text:

…sample: masterdev1027@gmail.com fulldev317@gmail.com codeknight0707@gmail.com seniordev9726@outlook.com dreamcomes0704@gmail.com topdev1228@protonmail.com helios0912@outlook.com smartfox1203@gmail.com "star", "dev", "pro", "senior", and "coder" are typical keywords seen in the emails,…
Sample Blog Post | Chollima Group — Chollima Group · under “Autofill Data:” · published 2024-10-01 · pulled 2026-10-18
Nearby text:

…codeknight0707@gmail.com - seniordev9726@outlook.com - anydev1103@gmail.com - fulldev114@outlook.com - boriszhang1021@gmail.com - topdev1228@protonmail.com - hasan.musaj312@protonmail.com - toshyodev@outlook.com - slark0704@gmail.com - helios9116@outlook.com - cleanlake412@hotmail.com -…
DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Analysis of DPRK IT Worker Logs” · published 2025-06-19 · pulled 2026-08-30

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Sample Blog Post | Chollima Group

Chollima Group lists 27 other indicators in this source. 7 are shown, chosen across types.

All 28 indicators from this source

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 5 are shown, chosen across types.

All 855 indicators from this source