aokisasaki1122@gmail.com
aokisasaki1122@gmail.com is an email address
that 4 published sources report
in connection with IT Worker Fraud and Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from NKInternet, Panther Labs, Socket and Anonhaven.
The earliest of those reports is dated 2026-04-07 and the most recent 2026-04-24.
email address IT Worker FraudContagious Interview MATCHED IN SOURCE
Sources
-
…match + thin content Coming-soon shell, fabricated testimonials, no verifiable clients Email addresses Address Persona Notes aokisasaki1122@gmail.com[email protected] npm maintainer / golangorg email Registered all three malicious packages, linked to golangorg GitHub…
npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things | North Korean Internet — NKInternet -
…coremeshnode 2026-03-26 graph first seen hello@jsonspack.com dev-log-core 2026-03-16 live registry aokisasaki1122@gmail.com df-vision 2026-04-16 live registry atddevs@gmail.com dotenv-pack 2026-04-17 live registry…
Inside DPRK’s npm Malware Factory: 108 Packages & 261 Versions — Panther Labs -
…Threat Actor’s Identifiers # Aliases aokisasakidev1 aokisasakidev golangorg Registration Emails aokisasaki1122@gmail.com shiningup1996@gmail.com GitHub Accounts and GitHub Collaborators https://github.com/golangorg…
North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads | Socket — Socket -
…Two registration emails were tied to the cluster, aokisasaki1122@gmail.com and shiningup1996@gmail.com . Independent corroboration Socket's findings on the PyPI side are corroborated by independent reporting.…
Contagious Interview Hits npm, PyPI, Go, Rust, PHP — Anonhaven
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.
Related indicators
Cited by the same report: npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things | North Korean Internet
All 32 indicators from this source
Cited by the same report: Inside DPRK’s npm Malware Factory: 108 Packages & 261 Versions
All 98 indicators from this source