logo

Fake job offers target software developers with infostealers

ID: 6c6eb41c-d956-5358-b266-e0090263e2af

STIX ID: report--6c6eb41c-d956-5358-b266-e0090263e2af

Feed Name: WeLiveSecurity (ESET Research)

Threat Score
85/100

Date Published: 2025-02-20

Date Updated: 2026-05-01

...
...

ESET reports on DeceptiveDevelopment, a North Korea‑aligned campaign that targets freelance software developers via spearphishing job offers and malicious coding-test files hosted on private repositories; the payloads are info‑stealers that capture browser and password‑manager credentials and drain cryptocurrency wallets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.