[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC2ajASTQbjIFnJ4GF2JXvZGM6WVB2wv0iv9F9Dtn0iQ":3},{"article":4,"iocs":47,"watch_terms":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":27,"category":28,"article_tags":31},"9368e47b-3089-4b36-a8e7-a6cbb4bfaffc","DPRK Fake Job Scams Self-Propagate in 'Contagious Interview'","dprk-fake-job-scams-self-propagate-in-contagious-interview-824fa5","A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other malware.","North Korean threat actors are leveraging compromised developer repositories as self-propagating infection vectors to distribute remote access Trojans and malware through fake job recruitment schemes. The attack uses a worm-like mechanism dubbed 'Contagious Interview' that spreads malware to developers who interact with poisoned code repositories. This supply-chain attack targets software developers and combines social engineering with technical compromise.","North Korean fake job scams distribute RATs via compromised developer repositories.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fdprk-fake-job-scams-self-propagate-contagious-interview","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt3fce2e5014a4ecec\u002F694ad7a0ec1580176ac05f87\u002FDPRK_Square_Ian_Cowe_Alamy.jpg?width=1280&auto=webp&quality=80&disable=upscale","2026-04-22T14:48:05+00:00","2026-04-22T16:00:25.55375+00:00",8,[18,21,24],{"name":19,"type":20},"DPRK (North Korea)","threat_actor",{"name":22,"type":23},"Contagious Interview","campaign",{"name":25,"type":26},"Developer repositories","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":27,"icon":11,"name":29,"slug":30},"Malware","malware",[32,37,42],{"category":33},{"id":34,"icon":11,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":11,"name":40,"slug":41},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":43},{"id":44,"icon":11,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[48],{"type":30,"value":49,"context":50},"RAT (Remote Access Trojan)","Malware distributed via compromised repositories in fake job scams",[]]