DPRK Fake Job Scams Self-Propagate in 'Contagious Interview'

Trend Micro and reporting detail a North Korean-linked campaign (Void Dokkaebi / Famous Chollima) using fake job-offer interviews to distribute malicious code repositories and VS Code workspace tasks that deploy remote access trojans and steal crypto/CI/CD secrets; infected repositories act like a worm to propagate through forks and downstream projects, with hundreds of infected repositories and malicious task configurations observed and blockchain services used for payload staging.