masterdev1027@gmail.com

masterdev1027@gmail.com is an email address that 2 published sources report in connection with IT Worker Fraud activity, which public reporting attributes to North Korea (DPRK). It is cited here from Chollima Group and tayvano (lazarus-bluenoroff-research). The earliest of those reports is dated 2024-10-01 and the most recent 2026-10-18.

email address IT Worker Fraud MATCHED IN SOURCE

First seen 2024-10-01 · last seen 2026-10-18

Sources

  • Nearby text:

    …Here's a small sample: masterdev1027@gmail.com[email protected] fulldev317@gmail.com[email protected] codeknight0707@gmail.com[email protected]…
    Sample Blog Post | Chollima Group — Chollima Group · under “Autofill Data:” · published 2024-10-01 · pulled 2026-08-30
  • Nearby text:

    …hasan.musaj312@protonmail.com - toshyodev@outlook.com - slark0704@gmail.com - helios9116@outlook.com - cleanlake412@hotmail.com - masterdev1027@gmail.com - github.com/smartfox1203 - github.com/hellovlady - github.com/fulldev317 - github.com/Zhang-777 --- # [MSMT: The DPRK’s Violation…
    DPRK IT Workers — tayvano (lazarus-bluenoroff-research) · under “Analysis of DPRK IT Worker Logs” · published 2025-06-19 · pulled 2026-08-30
  • Nearby text:

    …Here's a small sample: masterdev1027@gmail.com fulldev317@gmail.com codeknight0707@gmail.com seniordev9726@outlook.com dreamcomes0704@gmail.com topdev1228@protonmail.com helios0912@outlo…
    Sample Blog Post | Chollima Group — Chollima Group · under “Autofill Data:” · published 2024-10-01 · pulled 2026-10-18

Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.

Related indicators

Cited by the same report: Sample Blog Post | Chollima Group

Chollima Group lists 27 other indicators in this source. 7 are shown, chosen across types.

All 28 indicators from this source

Cited by the same report: DPRK IT Workers

tayvano (lazarus-bluenoroff-research) lists 854 other indicators in this source. 5 are shown, chosen across types.

All 855 indicators from this source

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. See the sourcing methodology.