North Korean Hackers Spread Malware Using Cryptocurrency Job Offers

North Korean-linked hackers are approaching job seekers under the pretext of cryptocurrency job openings, luring them into installing malware. The security threat intelligence platform OpenSourceMalware reported that an attack method called 'Contagious Interview' is being used. This attack impersonates recruiters to approach job seekers and encourages them to execute malware during interviews or development tasks. Hackers suggest digital asset-related jobs on LinkedIn and invite job seekers to private code repositories, where they are prompted to install development program packages. The key lies in a configuration file that alters the download address of the program. Using the package management tool 'npm' commonly used for JavaScript development, attackers configure it to fetch specific packages from unofficial repositories. When job seekers execute installation commands in this configured environment, they can run malware hidden in external repositories. McCarty noted that these changes have been observed for several weeks, but the specific number of victims or the scale of stolen digital assets was not mentioned.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.