North Korea’s job interview scam runs both ways
North Korea's Contagious Interview group targets Rust developers with fake job scams to steal credentials and crypto, infecting 30,000+ devices.
North Korean state-sponsored threat group Contagious Interview (aka WaterPlum) is targeting Rust developers and maintainers with fake job or collaboration offers. Attackers use malicious coding assignments or video calls to trick victims into installing malware or revealing credentials. Stolen credentials are used for cryptocurrency theft, extortion, and to support North Korean IT worker schemes. International authorities report the group has infected over 30,000 devices across more than 100 countries and stolen funds from over 7,000 cryptocurrency wallets.
- North Korean state-sponsored group Contagious Interview targets Rust developers with fake job offers.
- Attackers use malicious coding assignments or video calls to deliver malware and steal credentials.
- Stolen credentials are used for crypto theft, extortion, and supporting North Korean IT worker schemes.
- Over 30,000 devices infected across 100+ countries, with funds stolen from 7,000+ crypto wallets.
- Threat actors
- Contagious InterviewWaterPlum
- Organizations
- Rust ProjectRust Foundation
- Countries
- North Korea
From the original article
4 min read at helpnetsecurity.com
Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to compromise their devices and accounts and, ultimately, publish malware. The warning came last week from the Rust Project’s crates.
By Zeljka Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.