Scworld North Korea's Contagious Interview Campaign Uses JSON for Malware Distribution
Article Content
Browse articles 
North Korean threat actors are utilizing JSON storage services to distribute malware through the Contagious Interview campaign, which has been active since 2023. They impersonate hiring professionals to lure developers into executing trojanized coding tasks that pull obfuscated payloads from public JSON-storage services, as detailed in an NVISO Labs analysis.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track BeaverTail in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
New WeaselBiscuit JavaScript Stealer Discovered in npm Packages Cybersecurity researchers identified a new JavaScript stealer named WeaselBiscuit, which spreads through 13 malicious npm packages. This malware is believed to have functional overlaps with DPRK-associated strains BeaverTail and OtterCookie but is smaller and lacks certain advanced features. It operates by executing a… 
Go Malware Campaign Targets Terraform Providers and Go Modules Cybersecurity researchers have identified a Go-based malware campaign utilizing malicious Terraform providers and Go Modules. The campaign marks the first known instance of malware being distributed through HashiCorp's centralized repository. The affected packages include gocommunity-io/dockerd and kreuzwenker/docker…