Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews

Void Dokkaebi, a North Korean threat actor, is running a high-severity supply-chain malware campaign called the “Contagious Interview,” which lures software developers with fake job interviews to clone malicious code hosted on platforms like GitHub, GitLab, and Bitbucket; the malware spreads via Visual Studio Code configurations and can propagate through CI/CD pipelines and developer repositories, with Trend Micro reporting over 750 infected repositories and the campaign active since at least 2023.