ClickFake Interview Campaign by Lazarus Targets Crypto Job Seekers

Sekoia uncovered the "ClickFake Interview" campaign attributed to North Korea's Lazarus Group in which attackers pose as recruiters to lure cryptocurrency professionals into interviews and deliver ClickFix malware via malicious documents or links, enabling remote access and theft of wallet credentials; the report lists IOCs and recommends verification of recruiters, cautious handling of attachments/links, and layered endpoint defenses.