lukaweb24@gmail.com
lukaweb24@gmail.com is an email address
that 2 published sources report
in connection with IT Worker Fraud activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from Narcass3 (@Narcass3) and Chollima Hunter.
The earliest of those reports is dated 2026-07-08 and the most recent 2026-09-24.
email address IT Worker Fraud CURATED
Sources
-
DRC Team is not an operator identity. The thread describes it as a fraudulent freelancer facilitation service set up by a group of Serbians, which supplied DPRK IT workers with a Serbian mobile number, identities, laptops and payment systems, and which was hosted on an IP address behind a nondescript login page. The source states that a persona cost between 70 and 300 dollars and arrived with Payoneer, PayPal, Upwork and Freelancer accounts and a real identity, that non-VOIP mobile numbers were paired with Pushbullet and AirDroid so the workers could receive texts, and that more than 150 laptops were in use. The first two accounts are the ones the source says the administrator used for support; the rest it files under persona and payment information. These are the facilitators' accounts as the source presents them, not accounts attributed to any DPRK operator.
x.com/Narcass3/status/2074856040525402531 — Narcass3 (@Narcass3) -
Found on 24 September 2026 by searching GitHub's commit index for published persona addresses and reading which account GitHub attributes the commits to. GitHub credits a commit to the account that has the signing address registered and verified, which only the holder of the mailbox can do, so an attributed account is one the address's holder controls, whichever repository the commits sit in and whenever the address was added. Counts are of the commits GitHub's search returns, up to 100. GitHub attributes 2 commits signed lukaweb24@gmail.com, an address Narcass3 publishes for this group, to github.com/lukadev24, account id 190110874, created on 29 November 2024, with 2 public repositories.
github.com/lukadev24 — Chollima Hunter
Find this indicator in the index, or see every email address this site holds under Email addresses in the browse listing.