north korea news
2 stories
North Korean hackers use fake coding interviews to steal developer credentials
North Korean state-sponsored hackers are employing a sophisticated new tactic, dubbed "Contagious Interview," to compromise developers by embedding malware within seemingly benign coding challenges. The campaign, tracked as REF9403, leverages steganography to hide multi-stage payloads within SVG image files, which have gone undetected by all major antivirus vendors.
North Korean Hackers Use SVG Images to Hide Malware in Fake Coding Tests
Reports indicate that North Korean threat actors, linked to the "Contagious Interview" campaign, are leveraging steganography within Scalable Vector Graphics (SVG) image files to conceal malware. This sophisticated technique is being deployed as part of a broader campaign that utilizes deceptive job postings and fabricated coding challenges to distribute malicious payloads. The ultimate goal…