“Contagious Interview”: How North Korean Hackers Use Fake Jobs to Breach IT Firms

Insikt Group identifies PurpleBravo, a North Korean threat actor conducting a "Contagious Interview" campaign that impersonates recruiters on professional sites and sends weaponized coding challenges to developers' corporate devices, deploying BeaverTail, PylangGhost, and GolangGhost to steal credentials and establish persistent access—posing a significant IT software supply-chain risk across AI, cryptocurrency, and financial sectors.