#contagious-interview

[ follow ]
#north-korea #malware #cybersecurity #supply-chain-attack #purplebravo #malicious-vs-code #job-seeker-lure
Information security
fromThe Hacker News
1 week ago

N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust

Contagious Interview campaign targets Go, Rust, and PHP ecosystems with malicious packages that function as malware loaders.
Information security
fromThe Hacker News
2 months ago

North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job Interviews

North Korean-linked PurpleBravo targeted 3,136 IPs and 20 organizations across sectors and regions using malicious developer tools and job-seeker lures.
Information security
fromThe Hacker News
4 months ago

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

North Korea-linked actors exploited the React2Shell RSC vulnerability to deploy EtherRAT, a Node.js-based RAT that uses Ethereum smart contracts for command-and-control.
fromThe Hacker News
6 months ago

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality of two of its malware programs, indicating that the hacking group is actively refining its toolset. That's according to new findings from Cisco Talos, which said recent campaigns undertaken by the hacking group have seen the functions of BeaverTail and OtterCookie coming closer to each other more than ever, even as the latter has been fitted with a new module for keylogging and taking screenshots.
Information security
Information security
fromThe Hacker News
6 months ago

North Korean Hackers Use New AkdoorTea Backdoor to Target Global Crypto Developers

North Korea-linked actors use multi-platform malware including AkdoorTea to target cryptocurrency and Web3 developers via fake recruiter job offers that install backdoors.
[ Load more ]