CL-STA-0240
2023-11-21 • Paloalto Networks • Hacking Employers and Seeking Employment: Two Job…
CL-STA-0240 is Unit 42's tracking identifier for Contagious Interview, a North Korea-linked campaign active since at least December 2022. Its operators pose as prospective employers and approach software developers through job platforms and other communications channels, then use technical interviews to convince victims to run malicious packages or applications. The campaign has delivered BeaverTail and InvisibleFerret across Windows and macOS and is assessed as supporting cryptocurrency theft and follow-on access.
-
28
Related Actors
-
248
Related Reports