North Korean Hackers Posed as Recruiters. They Infected 30k Devices Worldwide

North Korean hackers masquerading as recruiters in a fake job-offer campaign that infected roughly 30,000 devices worldwide.

North Korean threat actors posed as recruiters in a social engineering campaign that compromised an estimated 30,000 devices worldwide. The recruiter-lure pattern matches Pyongyang's known operations that trick job seekers, typically developers, into executing malware during fake interview processes.

• Campaign compromised roughly 30,000 devices worldwide
• Attackers impersonated recruiters to deliver malware to targets
• Lure pattern consistent with DPRK fake-recruiter campaigns targeting job seekers