logo

North Korean Hackers Target Job Seekers With Phony Interviews

ID: e547572f-eb3c-5f6f-8808-7c3b9974ed72

STIX ID: report--e547572f-eb3c-5f6f-8808-7c3b9974ed72

Feed Name: KnowBe4 Blog

Threat Score
85/100

Date Published: 2026-02-13

Date Updated: 2026-04-28

Author: KnowBe4 Team

...
...

Recorded Future warns that North Korean APT 'PurpleBravo' is targeting software developers and IT services across multiple regions using job-themed phishing, fake LinkedIn recruiter profiles, ClickFix attacks, and malicious GitHub repositories as part of phony coding interviews. These social-engineering tactics have likely resulted in execution of malicious code on corporate devices and create an acute software supply-chain risk for organizations that outsource development.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.