North Korean Actors Use JSON Services for Malware Delivery

North Korean Actors Use JSON Services for Malware Delivery

First seen 17 Nov 2025, 15:14 UTC •ThehackernewsSecurityaffairs.CoTechradar •37.6

Article Content

Browse articles
ThreatCluster

North Korean threat actors have adopted new tactics by utilizing JSON storage services to host and deliver malware through trojanized code projects. This method is part of the Contagious Interview campaign, as reported by NVISO. The use of services like JSON Keeper and JSONsilo marks a significant evolution in their malware distribution strategies.

How this analysis works

Extracted Entities

1 / 2