Fake Job Offers Target Software Developers With Infostealers

Video

A North Korea-aligned activity cluster tracked by ESET arsenic DeceptiveDevelopment drains victims' crypto wallets and steals their login specifications from web browsers and password managers

20 Feb 2025

ESET researchers person observed a malicious run wherever North Korea-aligned threat actors, posing arsenic headhunters, target freelance package developers pinch info-stealing malware.

The activities – named DeceptiveDevelopment and going backmost to astatine slightest November 2023 – impact spearphishing messages that are being distributed connected job-hunting and freelancing sites and inquire nan targets to return a coding test, pinch nan files basal for nan task usually hosted connected backstage repositories specified arsenic GitHub. These files are laden pinch malware, however, which yet lets nan attackers bargain nan victims' login specifications and drain their cryptocurrency wallets.

What other is location to cognize astir nan campaign's tactics, techniques, and procedures? Learn from ESET Chief Security Evangelist Tony Anscombe successful nan video and make judge to publication nan full blogpost.

Connect pinch america on Facebook, X, LinkedIn and Instagram.