lazarusholic

Everyday is lazarus.dayβ

#ContagiousInterview

Operation/Campaign

Reports

2025-05-08
NTTSecurity
WaterPlumが使用するマルウェアOtterCookieの機能追加
#OtterCookie #WaterPlum #ContagiousInterview
2025-05-08
NTTSecurity
Additional Features of OtterCookie Malware Used by WaterPlum
#OtterCookie #WaterPlum #ContagiousInterview
2025-04-25
TeamCymru
Now that the cat is out of the bag regarding the use of front companies like BlockNovas LLC
#ContagiousInterview
2025-04-25
HISolutions
Rolling in the Deep(Web): Lazarus Tsunami
#ContagiousInterview #Tsunami
2025-04-24
Silentpush
Contagious Interview (DPRK) Launches a New Campaign Creating Three Front Companies to Deliver a Trio of Malware
#BeaverTail #ContagiousInterview #InvisibleFerret #OtterCookie #FamousChollima #ClickFix
2025-04-11
BirminghamCyber
Interview with the Chollima
#ContagiousInterview #OtterCookie
2025-04-04
Socket
Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
#BeaverTail #ContagiousInterview #Lazarus #NPM
2025-03-31
SEKOIA
From Contagious to ClickFake Interview: Lazarus leveraging the ClickFix tactic
#ClickFix #ContagiousInterview #GolangGhost #Lazarus #FrostyFerret
2025-03-24
BirminghamCyber
Cómo domar un Chollima
#ChaoticCapybara #VelvetChollima #macOS #ContagiousInterview
2025-03-15
Slowmist
Analysis of LinkedIn Recruitment Phishing
#ContagiousInterview
2025-03-14
Bruno
I just got a scam attempt by a Linkedin "recruiter"
#ContagiousInterview
2025-03-12
dazhengzhang
Another day another North Korean scammer
#ContagiousInterview
2025-03-10
ronxjansen
Npm Run Hack:Me - A Supply Chain Attack Journey
#ContagiousInterview
2025-02-28
Silentpush
Astrill VPN: Silent Push Publicly Releases New IPs on VPN Service Heavily Used by North Korean Threat Actors
#ContagiousInterview #FamousChollima
2025-02-26
PaloaltoNetworks
RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector
#ContagiousInterview #Koi #RustDoor #macOS #AlluringPisces
2025-02-19
Kandji
DPRK DriverEasy & ChromeUpdate Deep Dive
#ContagiousInterview #DriverEasy
2025-02-13
Moonlock
Cybercrooks Are Using Fake Job Listings to Steal Crypto
#ContagiousInterview
2025-02-07
RayssaCardoso
Infostealer malware linked to Lazarus Group campaigns
#ClickFix #ContagiousInterview #Lazarus
2025-02-06
HivePro
“Contagious Interview” Targets macOS with FlexibleFerret Malware
#ContagiousInterview #FlexibleFerret
2025-02-03
SentinelOne
macOS FlexibleFerret | Further Variants of DPRK Malware Family Unearthed
#ContagiousInterview #FlexibleFerret #macOS #FrostyFerret
2025-01-20
ENKI
Lazarus의 Contagious Interview 캠페인 변종 분석
#ContagiousInterview #Lazarus
2025-01-16
Validin
Lazarus APT: Techniques for Hunting Contagious Interview
#ContagiousInterview #Lazarus #ClickFix
2025-01-09
Zeroshadow
DPRK's Willo Impersonation Campaign
#ContagiousInterview
2025-01-05
dmpdump
North Korea-nexus Golang Backdoor/Stealer from Contagious Interview campaign
#ContagiousInterview
2024-12-28
Tay
Heads up all—some dudes have a slick, new way of dropping some nasty malware
#ContagiousInterview #Lazarus
2024-12-27
Rewterz
Developers Targeted by New ‘OtterCookie’ Malware with Fake Job Offers – Active IOCs
#ContagiousInterview #OtterCookie
2024-12-26
NTTSecurity
OtterCookie, new malware used in Contagious Interview campaign
#ContagiousInterview #OtterCookie
2024-12-26
NTTSecurity
Contagious Interviewが使用する新たなマルウェアOtterCookieについて
#ContagiousInterview #OtterCookie
2024-11-04
Zscaler
From Pyongyang to Your Payroll: The Rise of North Korean Remote Workers in the West
#BeaverTail #ContagiousInterview #InvisibleFerret #Wagemole
2024-11-01
Ketman
Malicious Github Accounts with gh-fake-analyzer
#ContagiousInterview #Lazarus
2024-10-29
Macnica
北からのジョブオファー: ソフトウェア開発者を狙うContagious Interview
#FamousChollima #InvisibleFerret #ContagiousInterview #BeaverTail
2024-10-24
Datadog
Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview
#BeaverTail #ContagiousInterview #TenaciousPungsan
2024-10-09
PaloaltoNetworks
Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware
#BeaverTail #ContagiousInterview #InvisibleFerret
2024-09-04
Group-IB
APT Lazarus: Eager Crypto Beavers, Video calls and Games
#BeaverTail #CivetQ #ContagiousInterview #InvisibleFerret #Lazarus #MiroTalk #FCCCall
2024-08-29
Phylum
North Korea Still Attacking Developers via npm
#ContagiousInterview #MoonstoneSleet #NPM
2024-08-23
Coinmonks
Suspicious activity in GitHub associated with Lazarus Group
#ContagiousInterview #Lazarus
2024-07-21
Coinmonks
Investigating the campaigns of Lazarus Group targeting developers and companies
#ContagiousInterview #Lazarus
2024-05-13
Dimitribest
Lazarus Group Targets Blockchain Developers with Social Engineering and Visual Deception Techniques in Code
#ContagiousInterview
2024-05-10
Qianxin
针对区块链从业者的招聘陷阱：疑似Lazarus（APT-Q-1）窃密行动分析
#APT-Q-1 #ContagiousInterview
2023-11-21
PaloaltoNetworks
Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors
#InvisibleFerret #ContagiousInterview #Wagemole #BeaverTail #NPM