Beware! Malicious Recruitment Emails Deliver BeaverTail and Tropidoor Malware Payloads

### Executive Summary A phishing campaign targeting developers used fake job postings and BitBucket-hosted files to deliver obfuscated JavaScript infostealer 'BeaverTail' and a downloader 'car.dll' that installs the in-memory backdoor 'Tropidoor'; the report links these tools and tactics to the Lazarus APT and includes file hashes, IPs, and URLs as IoCs.