The security platform disclosed that North Korean hackers launched attacks using recruitment as bait

According to Digital Asset, the security platform OpenSourceMalware revealed in a program on October 21 that a North Korea-linked hacking group is using a technique called Contagious Interview, luring job seekers in the cryptocurrency industry through LinkedIn to invite them to visit private code repositories and install software packages required for development tasks.

The attackers set up a .npmrc configuration file in the repository, causing npm to download dependencies from a specified external package repository instead of the public registry, which could potentially execute malicious code during the installation process and reduce the likelihood of being detected by public security scans. Paul McCarty, co-founder of OpenSourceMalware, stated that this type of technique has been observed recently among attackers. The specific number of victims, affected companies, or the amount of digital asset losses has not yet been disclosed.