apollo21century@gmail.com

apollo21century@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Nisos and Chollima Hunter. The earliest of those reports is dated 2025-05-19 and the most recent 2026-09-24.

email address IT Worker Fraud CURATED

First seen 2025-05-19 · last seen 2026-09-24

Sources

  • Nisos describes a network of GitHub accounts, portfolio websites and freelancer profiles posing as Polish and United States developers, fronted by a freelance software company called Inspiration With Digital Living, and assesses it as likely DPRK-affiliated on the strength of shared lion-themed avatars, addresses built around the word century, portfolio sites cut from one template, and photographs pasted onto stock images. The Vercel portfolio site is in the report's text, as are six GitHub Pages sites recorded below rather than as indicators; the GitHub accounts and the three addresses are transcribed by hand from the two tables the report publishes as images, read at full resolution. Nisos attaches no persona name to any of these accounts, so none is attached here; the names it does mention, Jan Kowalski on one portfolio's about section and Kornel Dudek, Fred Rowe, Juan Pablo Torres and Thomas Richard in the sites' testimonials, are not tied to any account and are not recorded.
    nisos.com/research/saja-dprk-employment-scam/ — Nisos · under “Saja network portfolio accounts (Nisos)” · published 2025-05-19 · pulled 2026-09-18
  • Found on 24 September 2026 by searching GitHub's commit index for published persona addresses and reading which account GitHub attributes the commits to. GitHub credits a commit to the account that has the signing address registered and verified, which only the holder of the mailbox can do, so an attributed account is one the address's holder controls, whichever repository the commits sit in and whenever the address was added. Counts are of the commits GitHub's search returns, up to 100. GitHub attributes 1 commit signed apollo21century@gmail.com, an address Nisos publishes for this group, to the login SoftDevVeteran, which no longer resolves.
    github.com/SoftDevVeteran — Chollima Hunter · under “GitHub accounts holding addresses from "Saja network portfolio accounts (Nisos)"” · pulled 2026-09-24

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: nisos.com/research/saja-dprk-employment-scam/

Nisos lists 14 other indicators in this source. 7 are shown, chosen across types.

All 15 indicators from this source

Cited by the same report: github.com/SoftDevVeteran

Chollima Hunter lists 1 other indicator in this source.

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.