Cyber Threat Alert: Fake Job Offers Spreading Malware

A group of hackers is spreading malicious malware on the computers of job seekers under the pretext of online job interviews. They are using malware called ‘Beavertail’ and ‘InvisibleFerret’ to steal important information from specific individuals’ computers in a well-planned manner from afar.

Cybersecurity firm ESET said in a report that this cyber attack is related to cyber attacks named ‘Contagious Interview’, ‘Devpopper’, ‘Famous Chollima’, ‘Purplebravo’ and ‘Tenacious Pungsan’. Through this, cryptocurrency wallets and login information are being stolen from users’ browsers and password managers. North Korean hackers are carrying out such cyber attacks in a well-planned manner, targeting freelance software developers.

It is learnt that hackers created fake employer profiles and contacted freelance app developers on social media. They then sent them Trojan malware-laden code stored on GitHub, GitLab or Bitbucket. Later, during job interviews, they were asked to use the codes to create various games and apps. Once the codes were used, the malware entered the job seekers’ computers and started stealing information.

According to ESET, such cyber attacks are increasingly targeting software developers associated with various digital currencies and financial projects. Such attacks have been seen more frequently in Finland, India, Italy, Pakistan, Spain, South Africa, Russia, Ukraine, and the United States. However, hackers are carrying out large-scale attacks regardless of geographical location. Therefore, everyone should be aware of this.