North Korea's Contagious Interview Campaign Uses JSON for Malware Distribution

North Korea's Contagious Interview Campaign Uses JSON for Malware Distribution

First seen 17 Nov 2025, 15:14 UTC •ScworldCsoonline •87% similarity •30.6

Article Content

Browse articles
ThreatCluster

North Korean threat actors are utilizing JSON storage services to distribute malware through the Contagious Interview campaign, which has been active since 2023. They impersonate hiring professionals to lure developers into executing trojanized coding tasks that pull obfuscated payloads from public JSON-storage services, as detailed in an NVISO Labs analysis.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →