North Korean Hackers Target Software Developers With Phony Coding Tests

Researchers at ReversingLabs warn that North Korea’s Lazarus Group is impersonating recruiters from major financial firms and sending coding assessment tests that contain malicious Python packages; the README instructions and short deadlines are used to social-engineer developers into executing the malware as part of the “assignment.”