Norks blast 250+ fake job offers to developers over 6 weeks to try and snarf creds and crypto

Proofpoint researchers uncovered UNK_DeadDrop, a likely North Korea-linked recruitment-themed phishing campaign that sent over 250 emails to nearly 100 organizations, luring developers to attacker-controlled GitHub repositories which trigger preconfigured tasks to deploy a malicious VS Code extension and platform-specific loaders; the campaign delivers Overlord-based RATs on macOS/Linux and a Node.js/Electron-based stealer on Windows to exfiltrate browser credentials, keychain/keyring data, and cryptocurrency wallet files.