Contagious Interview: Malware delivered through fake developer job interviews
The Contagious Interview campaign targets developers through fraudulent job recruitment, with threat actors impersonating recruiters from crypto and AI companies. Malicious coding assessments deliver backdoors like OtterCookie and FlexibleFerret that steal API tokens, cloud credentials, crypto wallets, and source code. This supply chain attack exploits trust in the hiring process to compromise developer environments and organizational security.
Summary
The Contagious Interview campaign targets developers through fraudulent job recruitment, with threat actors impersonating recruiters from crypto and AI companies. Malicious coding assessments deliver backdoors like OtterCookie and FlexibleFerret that steal API tokens, cloud credentials, crypto wallets, and source code. This supply chain attack exploits trust in the hiring process to compromise developer environments and organizational security.
Indicators of Compromise
- malware — OtterCookie
- malware — FlexibleFerret