#DriverEasy
Malware/Tool
2025-02-19 • DPRK DriverEasy & ChromeUpdate Deep Dive
DriverEasy is a malicious macOS application written in Swift and Objective-C and used in DPRK-linked Contagious Interview activity. Attackers presented it during a fake job-interview process and named it to resemble a benign Google-related utility. Once opened, DriverEasy displayed a deceptive authentication interface designed to capture the victim's password. The application belongs to the same macOS cluster as ChromeUpdate and CameraAccess, combining recruitment-themed social engineering with credential theft against users who believed they were installing or authorizing a legitimate interview-related tool.
-
1
Tagged Reports
-
1
Unique Authors
-
1
Active Days