Hunting North Korea's job adverts on Google Docs

FAMOUS CHOLLIMA, a DPRK-nexus actor, is using long-lived Google Docs to advertise fake developer jobs and recruit proxy interviewees to deliver infostealing malware and drain cryptocurrency; the report demonstrates discovery and tracking methods (urlscan and dochunt), documents IOCs (document titles, resource hash, Bitbucket/GitHub links, doc IDs), shows asset reuse across campaigns, and highlights active tailoring of lures over time.