North Korean hackers are using updated malware strains in fake recruitment scams to steal sensitive information and cryptocurrency.
A report from Palo Alto Networks’ Unit 42 revealed that these hackers pose as job recruiters targeting software developers through online platforms.
Victims are invited to online interviews, where they are persuaded to download malware known as BeaverTail and InvisibleFerret.
BeaverTail operates on both macOS and Windows, disguised as legitimate applications like MiroTalk and FreeConference.
Recent versions of BeaverTail stealthily collect data, including browser passwords and cryptocurrency wallet credentials, now targeting 13 wallet extensions.
InvisibleFerret functions as a backdoor, logging keystrokes and stealing sensitive files while allowing remote access to compromised devices.
This campaign is part of broader North Korean efforts to infiltrate tech firms and compromise devices for financial gain.
Cybersecurity experts have intensified their focus on North Korean cyber activities, as these attacks aim to fund the regime’s missile programs.
