Nov 21, 2023 · We call the first campaign “Contagious Interview,” where threat actors pose as employers (often anonymously or with vague identities) to lure software developers into installing malware through the interview process.

Oct 9, 2024 · In this article, we present recent activity from the CL-STA-0240 Contagious Interview campaign. In this campaign, the attackers targeted job-seeking individuals on LinkedIn, luring them to download and execute malware that masquerades as …

1 day ago · The North Korean threat actors behind the Contagious Interview campaign have been observed delivering a collection of Apple macOS malware strains dubbed FERRET as part of a supposed job interview process. "Targets are typically asked to communicate with an interviewer through a link that throws an ...

1 day ago · Ferret Malware Added to 'Contagious Interview' Campaign Targets are lured into a fake interview process that convinces them to download malware needed for a virtual interview.

Dec 27, 2024 · Contagious Interview (aka DeceptiveDevelopment) refers to a persistent attack campaign that employs social engineering lures, with the hacking crew often posing as …

Nov 22, 2023 · The activity clusters have been codenamed Contagious Interview and Wagemole, respectively, by Palo Alto Networks Unit 42. While the first set of attacks aims to "infect software developers with malware through a fictitious job interview," the …

Oct 24, 2024 · First identified in late 2023 by researchers at Palo Alto Networks Unit 42, BeaverTail is a JavaScript infostealer and downloader malware prominently used by threat …

Nov 20, 2023 · For Contagious Interview, threat actors from the Democratic People's Republic of Korea (DPRK) are acting as employers, posting about fake job openings, and engaging with unwitting applicants.

Nov 30, 2023 · The first campaign, dubbed "Contagious Interview," employs a sophisticated ruse wherein threat actors pose as employers, targeting software developers seeking employment opportunities.

Jan 30, 2025 · A new cyberattack campaign, referred to as “Contagious Interview,” has been identified, where North Korean hackers use a fake video conferencing app to target developers.