Lazarus APT Jumps on ClickFix Bandwagon in Recent Attacks

North Korea-linked Lazarus is running a 'ClickFake Interview' campaign that lures cryptocurrency job seekers via social media to fake interview sites and uses the ClickFix technique to convince victims to paste/run commands that install malware; operators deploy the FrostyFerret infostealer and GolangGhost backdoor on macOS and Windows, targeting CeFi-related employees, and researchers published IoCs and detection/hunting rules.