Lazarus Group Using Git Hooks To Hide Malware

OpenSourceMalware discovered a Lazarus Group campaign (Contagious Interview / TaskJacker) that hides a stage‑2 loader in Git hooks (.githooks/pre-commit and post-checkout) to silently fetch platform-specific payloads from precommit.vercel.app, delivering InvisibleFerret/Beavertail implants for crypto wallet and credential theft; the report includes C2 URLs, a git blob SHA, and a GitHub hunt query to locate similar malicious repos.