DEV#POPPER

2024-04-25 • Securonix • Analysis of DEV#POPPER: New Attack Campaign Targe…

DEV#POPPER is Securonix's tracking name for an ongoing social-engineering campaign likely associated with North Korean threat actors. The operators target software developers with fictitious job interviews and malicious code repositories that deliver remote-access malware. Later activity expanded support across Linux, Windows, and macOS and affected victims in South Korea, North America, Europe, and the Middle East.

Related Actors

Related Reports

Top Authors

View all reports in this cluster

2026-07-28
Socket
#DevPopper #PolinRider #NPM #SupplyChain #OmniStealer #T1195.002 #T1027 #T1027.013 #T1059.007 #T1059.006 #T1059.004 #T1071.001 #T1105 #T1115 #Joyfill
2026-04-21
Trend Micro
#DevPopper #VoidDokkaebi
2026-04-11
KL4R10N
#DevPopper
2026-03-05
e Sentire
#DevPopper #OmniStealer
2026-01-14
OZ
#ContagiousInterview #DevPopper
2025-10-27
Ransom ISAC
#DevPopper #EtherHiding #T1547 #T1059.006 #T1059.007 #T1005 #T1573 #T1566 #T1041 #T1219 #T1195 #T1027 #T1204.002 #T1555.003 #T1095 #T1567 #T1071.001 #T1140 #T1082
2024-08-26
Poly Swarm
#NPM #DevPopper
2024-07-31
Securonix
#DevPopper #NPM #T1059.006 #T1070.004 #T1082 #T1027.010 #T1059.003 #T1041 #T1059.001 #T1560 #T1033 #T1132
2024-04-25
Securonix
#NPM #DevPopper #T1059.006 #T1070.004 #T1082 #T1027.010 #T1059.003 #T1041 #T1059.001 #T1560 #T1033 #T1132

View all reports in this cluster