ChainCatcher report, according to Digital Asset, the security platform OpenSourceMalware disclosed on its October 21 episode that a North Korea-linked hacking group is using a technique called "Contagious Interview" to target job seekers in the crypto industry. The attackers contact candidates via LinkedIn under the guise of recruitment and invite them to access private code repositories and install software packages required for development tasks. The attackers embed a .npmrc configuration file within the repository, causing npm to download dependencies from a specified external package registry instead of the public one, thereby enabling the execution of malicious code during installation and reducing the likelihood of detection by public security scans. Paul McCarty, co-founder of OpenSourceMalware, stated that such tactics have been recently observed. The number of victims, affected companies, or the amount of digital assets compromised has not yet been disclosed.
Security Platform Reveals North Korean Hackers Use Job Offers as Lure
ChaincatcherShare
Summary
A security platform revealed that North Korean hackers are using job offers to target cryptocurrency job seekers through a method called Contagious Interview. Attackers contact candidates on LinkedIn, direct them to private code repositories, and request that they install software packages. Malicious .npmrc files redirect npm to download dependencies from external sources, bypassing public security scans. Paul McCarty of OpenSourceMalware noted the recent surge in this tactic. No details regarding victims or financial losses were disclosed. Traders monitoring altcoins to watch should keep an eye on shifts in the Fear & Greed Index amid rising threats.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.