As cited
Copy frozen at (site build).
threat intel
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean threat actors conducting the Contagious Interview campaign are using fake job postings and coding challenges to deliver malware hidden within SVG image files through steganography. Users executing the malicious projects receive a four-stage payload aligned with OtterCookie, which steals browser credentials, cryptocurrency wallets, and files.
Why it matters: Development teams and job seekers are targeted through recruiting fraud; practitioners should educate staff on vetting coding challenges and reviewing suspicious project files before execution.
- Source published
- First seen by Cybersecurity Tracker