Muhammad Ghuffran

A professional identity this site read directly, cited below. Whether the name belongs to an operator, an invented persona or a real person whose identity was borrowed is not settled here.

IT Worker Fraud First reported 2025-07-01

Profiles and evidence

Curriculum vitae, as published

Name as writtenMuhammad Ghuffran
HeadlineAngular + .NET Full Stack Engineer
Posted2025-07-01
Sourcepipu.cc/en/item_detail.php?item_id=4748
Full text, as published
Muhammad Ghuffran (123) 456-7890 Ghuffran.dev@gmail.com Angular + .NET Full Stack Engineer Full Stack Developer with 7+ years of experience specializing in Angular and .NET technologies. Proven track record of building scalable web applications using Angular, TypeScript, C#, .NET Core, and related frameworks. Technical Expertise - Frontend: Angular, React, Vue.js, TypeScript, JavaScript, HTML5, CSS3 - Backend: Node.js, Express.js, C#, ASP.NET, .NET Core, MVC - Databases: MongoDB, SQL, MySQL, T-SQL, Entity Framework - Cloud & DevOps: AWS (EC2, S3), Azure, Microservices, API Gateway - Testing & Tools: Jasmine, Karma, Unit Testing, REST, SOAP, JSON, XML Professional Experience Full Stack Engineer *Website Movers | April 2018 – Present* - Developed web/mobile applications using C#, T-SQL, .NET Core, Angular, and MSSQL. - Built scalable web apps on Microsoft stack (ASP.NET, MVC, C#). - Optimized performance with Angular lazy loading and AOT compilation. - Implemented real-time features using SignalR and Angular. - Enhanced test coverage with Jasmine/Karma unit tests. Angular + .NET Developer *Axle Informatics | May 2016 – March 2018* - Designed SQL Server databases for Angular applications. - Streamlined data flows with NgRx for efficient state management. - Collaborated with UX/UI teams to develop Angular components. Education Bachelor’s in Software Engineering *Stevens Institute of Technology | 2012 – 2016* *(Formatted for clarity—contact details, skills, experience, and education are clearly separated.)*

Read from the cited page on 2026-09-12, published by Chollima Hunter. Every claim in it is the document's own and not verified; a name or employer it gives may belong to someone with no connection to the operation.

Identifiers attributed to this persona

2 indicators the sources below record for this operator, each with its sources.

IndicatorTypeAccount status
Muhammad Ghuffran alias —
ghuffrandev@gmail.com email address —

Muhammad Ghuffran

alias IT Worker Fraud CURATED

First seen 2025-07-01 · last seen 2025-07-01

Source

  • As printed:

    Muhammad Ghuffran (123) 456-7890 Ghuffran.dev@gmail.com …
    Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 1 July 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address ghuffran.dev@gmail.com is what tied the listing to this site's index: it appears in DTEX's i3 Threat Advisory email-indicator appendix, which DTEX itself says is not evidence of a confirmed attribution and may list addresses whose real owners are uninvolved. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
    pipu.cc/en/item_detail.php?item_id=4748 — Chollima Hunter · under “Muhammad Ghuffran” · published 2025-07-01 · pulled 2026-09-12

ghuffrandev@gmail.com

email address IT Worker Fraud CURATED

First seen 2025-05-14 · last seen 2025-07-01

Sources

  • As printed:

    Muhammad Ghuffran (123) 456-7890 Ghuffran.dev@gmail.com Angular + .NET Full Stack Engineer …
    Read on 12 September 2026 from a listing on the pipu.cc marketplace whose product description is this curriculum vitae and whose product image is the photograph shown. The listing went up on 1 July 2025 from a seller account named after the CV's subject, one of 1,882 such listings posted between 26 June and 2 July 2025 that between them hold about 1,860 CVs. The address ghuffran.dev@gmail.com is what tied the listing to this site's index: it appears in DTEX's i3 Threat Advisory email-indicator appendix, which DTEX itself says is not evidence of a confirmed attribution and may list addresses whose real owners are uninvolved. Every other value here is read from the listing itself and is the listing's own claim. A CV in this set may be a real person's stolen document, so the name on it, and the employers and schools it lists, may belong to someone with no part in the operation.
    pipu.cc/en/item_detail.php?item_id=4748 — Chollima Hunter · under “Muhammad Ghuffran” · published 2025-07-01 · pulled 2026-09-12
  • Per DTEX's own advisory text: these IOCs are NOT indicative of a confirmed North-Korea-attributed hack — they may have associations with IT-worker operations and require further investigation if observed in your environment. Any connection to actual persons may be deliberate (an operator using a real person's identity) or incidental, and the actual owner of an email account listed here may be unaware their address is associated with this IOC list. Do not treat presence on this list as proof of wrongdoing by the account holder.
    i3 Threat Advisory: Identifying North Korean IT Workers: Key Threat Indicators — DTEX Systems · published 2025-05-14 · pulled 2026-10-26

Sources

Back to all personas

Disclaimer An entry here is not proof of DPRK affiliation or wrongdoing. A listed name, account or address may belong to an uninvolved person, so each entry is a lead to verify independently. What inclusion means. Muhammad Ghuffran as the name of the operator is the cited researcher’s assertion, repeated here as their claim.