jsonkeeper.com

#ContagiousInterview #Lazarus #T1005 #T1059.006 #T1204.001 #T1059.007 #T1036 #T1555 #T1059.004 #T1027 #T1204.002 #T1566.002 #T1566.003 #T1555.003 #T1567 #T1071

2026-04-24

Panther

Inside DPRK's npm malware factory: 108 packages, 261 versions, and a 31-day campaign wave

#BeaverTail #NPM

2026-04-03

Panther

jsonspack: Multi-Tenant Node.js RAT â DPRK Supply Chain Campaign

#FamousChollima #NPM #T1059.007 #T1041 #T1132.001 #T1555.003 #T1001 #T1497.001 #T1480 #T1205

2026-04-02

Safe Dep

Malicious npm Package express-session-js Drops Full RAT Payload

#ContagiousInterview #NPM

2026-02-22

Kmsec

Tracking DPRK operator IPs over time

#FamousChollima #NPM

2026-02-21

Kmsec

DPRK tests Google Drive as a malware stager

#FamousChollima #NPM

2026-02-19

Gitlab

GitLab Threat Intelligence Team reveals North Korean tradecraft

#ContagiousInterview #ITWorker

2026-01-26

Code Crank

A LinkedIn Job Offer Tried to Install Malware on My Machine

#VSCode

2026-01-20

Abstract Security

Contagious Interview: Tracking the VS Code Tasks Infection Vector

#ContagiousInterview #VSCode

2025-11-13

NVISO

Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery

#ContagiousInterview #InvisibleFerret

« Back

⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.