Dark Reading

DPRK's 'Contagious Interview' Spawns Malicious Npm Package Factory

North Korean attackers have delivered more than 197 malicious packages as part of ongoing state-sponsored activity to ...
InfoWorld

Contagious Interview attackers go ‘full stack’ to fool you

The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a ...
The Hacker News

North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware

North Korean actors deployed 197 new npm packages delivering evolved OtterCookie and GolangGhost malware through fake ...
Dark Reading

Ferret Malware Added to 'Contagious Interview' Campaign

In a new patch for its on-device malware tool, Apple is pushing signature updates to XProtect in order to block variants of a malware belonging to what is known as the macOS Ferret family. This ...
TechJuice

North Korea-Linked ‘Job Interview’ Trap Evolves: JSON Storage Used to Host Malware

A North Korea-linked hacking campaign hides advanced malware inside public JSON storage services during fake job tests.
JD Supra

North Korea-linked threat actors utilize falsified companies and job interviews to distribute malware

A threat actor group with ties to the Democratic People’s Republic of Korea (“North Korea”) called Contagious Interview is using front companies to spread malware through fake job interviews. This ...
CSOonline

North Korea’s ‘Job Test’ trap upgrades to JSON malware dropboxes

North Korea-linked Contagious Interview campaign is now luring developers with trojanized coding tasks and pulling obfuscated payloads from public JSON-storage services like JSON Keeper, JSONSilo, and ...

New macOS malware chain could cause a major security headache - here's what we know

Jamf reports North Korean actors using fake job ads and ClickFix tactics to target macOS users Victims are tricked into ...
Hosted on MSN

North Korean hackers release malware-ridden packages into npm registry

Security researchers spotted 67 malicious packages on npm The packages are part of the Contagious Interview campaign They are most likely deployed by North Korean attackers North Korean hackers have ...
BGR

North Korean Hackers Created New macOS Malware Disguised As Popular App Installers

Another day, another macOS malware is trying to actively exploit your Mac. This time, North Korean hackers are using fake job offers hidden in updates to popular apps like Zoom and Google Chrome to ...