logo

North Korean Hackers Launch Job Interview Scam to Deploy BeaverTail and InvisibleFerret Malware

ID: 07c78e00-bbce-5760-9f9d-58794b9cb042

STIX ID: report--07c78e00-bbce-5760-9f9d-58794b9cb042

Feed Name: securityonline.info

Threat Score
85/100

Date Published: 2024-09-06

Date Updated: 2026-04-22

Author: do son

...
...

Lazarus Group is operating the 'Contagious Interview' campaign that social-engineers job seekers and blockchain professionals into installing BeaverTail and the InvisibleFerret backdoor via fake recruiter contacts, poisoned repositories, and a fraudulent FCCCall conferencing app; the tools enable credential and cryptocurrency wallet theft, keylogging, and exfiltration across Windows and macOS.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.