New DPRK Interview Campaign Leverages Fake Fonts to Deploy Malware

Cybersecuritynews •Tushar Subhra Dutta • January 26, 2026

North Korea’s Lazarus Group has launched a sophisticated supply chain attack targeting software developers through a campaign called “Fake Font.” The threat actors are using fake job interviews and malicious GitHub repositories to trick engineers into downloading code that contains hidden malware. This campaign, which began over 100 days ago, has recently intensified with 19 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DPRK's Lazarus Group Launches Fake Font Malware Campaign Targeting Developers North Korea's Lazarus Group has intensified a supply chain attack known as the 'Fake Font' campaign, targeting software developers through fake job interviews and malicious GitHub repositories. This campaign, which began over 100 days ago, has seen the identification of 19 malicious repositories and utilizes Microsoft Visual Studio Code task files to deliver sophisticated malware. 2 sources 27

Extracted Entities

New DPRK Interview Campaign Leverages Fake Fonts to Deploy Malware

The full story

Extracted Entities

APT Groups (1)

Attack Types (2)

Campaigns (1)

Countries (1)

Platforms (1)