Contagious Interview

Description

Contagious Interview (CL-STA-0240) is a campaign attributed to North Korean state-sponsored threat actors that targets software developers through fictitious job interviews. The attackers lure victims into installing malware disguised as software for review, with the objective of cryptocurrency theft and using compromised systems for further attacks. The campaign utilizes malicious NPM packages hosted on GitHub and employs social engineering tactics to deceive victims.