CivetQ is a modular suite of Python scripts used in the Lazarus-linked Contagious Interview campaign against developers and blockchain professionals. BeaverTail retrieves the suite and writes its .queue and .q2 components under a hidden .locale directory. The .q2 script launches .queue, polls command-and-control infrastructure, and can save and execute additional Python tasks. The .queue component records keystrokes and clipboard data, while bow steals browser information. Platform-specific startup files make the scripts execute automatically after reboot, providing persistence while keeping collection and task execution split across distinct modules.