Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...

Once trust is granted to the repository's author, a malicious app executes arbitrary commands on the victim's system with no ...

A threat actor group with ties to the Democratic People’s Republic of Korea (“North Korea”) called Contagious Interview is using front companies to spread malware through fake job interviews. This ...

The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a development and delivery pipeline to drop malware. Researchers at Socket have ...

Jamf reports North Korean actors using fake job ads and ClickFix tactics to target macOS users Victims are tricked into running curl commands in Terminal, installing FlexibleFerret backdoor malware ...

North Korean PurpleBravo hackers targeted 3,136 IPs and 20 companies using fake interviews, malicious VS Code projects, and BeaverTail malware.