Oct 9, 2024 · In this article, we present recent activity from the CL-STA-0240 Contagious Interview campaign. In this campaign, the attackers targeted job-seeking individuals on LinkedIn, luring them to download and execute malware that masquerades as …

Feb 4, 2025 · Contagious Interview, first uncovered in late 2023, is a persistent effort undertaken by the hacking crew to deliver malware to prospective targets through bogus npm packages and native apps masquerading as videoconferencing software. It's also tracked as DeceptiveDevelopment and DEV#POPPER.

6 days ago · The Contagious Interview attack chains are designed to drop JavaScript-based malware "BeaverTail," which delivers a Python backdoor known as InvisibleFerret, and harvests sensitive data from Web ...

Feb 4, 2025 · SentinelLabs researchers said FlexibleFerret is part of an active threat campaign dubbed “Contagious Interview” in which North Korean threat actors use job interviews to trick targeted individuals into downloading the malware.

Dec 27, 2024 · Contagious Interview (aka DeceptiveDevelopment) refers to a persistent attack campaign that employs social engineering lures, with the hacking crew often posing as recruiters to trick individuals looking for potential job opportunities into downloading malware under the guise of an interview process.

Nov 21, 2023 · We call the first campaign “Contagious Interview,” where threat actors pose as employers (often anonymously or with vague identities) to lure software developers into installing malware through the interview process.

Dec 26, 2024 · North Korean threat actors are using new malware called OtterCookie in the Contagious Interview campaign that is targeting software developers. Contagious Interview has been active since at...

Oct 24, 2024 · First identified in late 2023 by researchers at Palo Alto Networks Unit 42, BeaverTail is a JavaScript infostealer and downloader malware prominently used by threat actors connected to the DPRK, in particular as part of the Contagious Interview campaign that targeted developer job applicants.

Sep 4, 2024 · North Korean threat actors have leveraged a fake Windows video conferencing application impersonating FreeConference.com to backdoor developer systems as part of an ongoing financially-driven campaign dubbed Contagious Interview.

Jan 22, 2025 · Dubbed “Contagious Interview” or “DevPopper,” this campaign manipulates unsuspecting software developers by embedding malicious payloads into coding challenges, video call software, or dependencies.