CERT24Developers lured into running malware through fake LinkedIn job offers
RIA describes attacks in which criminals pose as recruiters and ask candidates during job interviews to download and open an apparently legitimate software project. Malicious code hidden in the projects may execute through automatic development-environment actions or dependency installation. According to RIA’s analysis, the technical characteristics of one incident in Estonia matched the North Korea-linked campaign known as “Contagious Interview”.