Pyongyang's Crypto Hackers Infiltrate 1640 Companies in Global Campaign

A recent report revealed that North Korean hackers infiltrated approximately 1,640 companies across 57 countries through a campaign known as 'Contagious Interview.'

The attack involved posing as recruiters or hiring managers and luring software developers into fake job interviews. The candidates were then asked to complete coding tests, which served as delivery vehicles for malware.

According to Vangelis Stykas, CTO of security firm Kumio, the attackers went straight for cryptocurrency wallets, private keys, and blockchain infrastructure. This suggests a clear financial motivation behind Pyongyang's cyber operations.

Stykas maintained access to the attackers' command-and-control infrastructure for nearly two years, accumulating 5 terabytes of hacker-related data. He discovered that compromised contractors provided access to up to 30 firms during the exploitation process.