New DPRK Interview Campaign Uses Fake Fonts to Deliver Malware

Gbhackers •Mayura Kathir • January 26, 2026

A dangerous new iteration of the “Contagious Interview” campaign that weaponizes Microsoft Visual Studio Code task files to distribute sophisticated malware targeting software developers. This campaign, which began over 100 days ago, has intensified dramatically in recent weeks with 17 malicious GitHub repositories identified across 11 distinct attack variants. North Korean threat actors linked to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DPRK's Lazarus Group Launches Fake Font Malware Campaign Targeting Developers North Korea's Lazarus Group has intensified a supply chain attack known as the 'Fake Font' campaign, targeting software developers through fake job interviews and malicious GitHub repositories. This campaign, which began over 100 days ago, has seen the identification of 19 malicious repositories and utilizes Microsoft Visual Studio Code task files to deliver sophisticated malware. 2 sources 27

Extracted Entities

New DPRK Interview Campaign Uses Fake Fonts to Deliver Malware

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Platforms (1)

Tools (1)