North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests

Elastic Security Labs uncovered a DPRK-linked campaign dubbed Contagious Interview that social-engineers developers with fake recruiter job lures and trojanized coding-project repositories; the attackers hide Base64-encoded payload fragments inside SVG flag images which a helper script reconstructs at runtime to deploy a four-part infostealer/backdoor and clipboard stealer across Windows, macOS, and Linux, enabling credential and crypto wallet theft and supply-chain propagation via pushed GitHub repos.