"Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads" published by Socket. #BeaverTail, #ContagiousInterview, #Lazarus, #NPM, #DPRK, #CTI https://socket.dev/blog/lazarus-expands-malicious-npm-campaign-11-new-packages-add-malware-loaders-and-bitbucket

Beware! Weaponized Job Recruitment Emails Spreading BeaverTail and Tropidoor Malware
https://gbhackers.com/beware-weaponized-job-recruitment-emails/

"BeaverTail and Tropidoor Malware Distributed via Recruitment Emails" published by Ahnlab. #BeaverTail, #Tropidoor, #DPRK, #CTI https://asec.ahnlab.com/en/87299/

"채용 메일을 위장한 피싱 공격 정황 사례 분석 (BeaverTail, Tropidoor)" published by Ahnlab. #BeaverTail, #Tropidoor, #DPRK, #CTI https://asec.ahnlab.com/ko/87227/

"DeceptiveDevelopment targets freelance developers" published by ESET. #BeaverTail, #DeceptiveDevelopment, #InvisibleFerret, #DPRK, #CTI https://www.welivesecurity.com/en/eset-research/deceptivedevelopment-targets-freelance-developers/

"BeaverTail & InvisibleFerret" published by SICERT. #BeaverTail, #InvisibleFerret, #DPRK, #CTI https://www.cert.si/tz016/

"Inside the Scam: North Korea’s IT Worker Threat" published by RecordedFuture. #BeaverTail, #ITWorker, #InvisibleFerret, #OtterCookie, #PurpleBravo, #TAG-121, #TAG-120, #DPRK, #CTI https://www.recordedfuture.com/research/inside-the-scam-north-koreas-it-worker-threat

"FERRET Malware Targets macOS in Sophisticated North Korean Attacks" published by CybersecSentinel. #BeaverTail, #FRIENDLYFERRET, #FlexibleFerret, #InvisibleFerret, #Lazarus, #OtterCookie, #macOS, #DPRK, #CTI https://cybersecsentinel.com/ferret-malware-targets-macos-in-sophisticated-north-korean-attacks/

"2024 macOS Malware Review | Infostealers, Backdoors, and APT Campaigns Targeting the Enterprise" published by SentinelOne. #BeaverTail, #HiddenRisk, #RustyAttr, #Trend, #macOS, #DPRK, #CTI https://www.sentinelone.com/blog/2024-macos-malware-review-infostealers-backdoors-and-apt-campaigns-targeting-the-enterprise/

"Personal experience regarding an interview that ended in a scam" published by sohay666. #BeaverTail, #InvisibleFerret, #DPRK, #CTI https://sohay666.github.io/article/en/reversing-scam-interview-base-on-js-project.html

"Bored BeaverTail & InvisibleFerret Yacht Club – A Lazarus Lure Pt.2" published by eSentire. #BeaverTail, #InvisibleFerret, #Lazarus, #DPRK, #CTI https://www.esentire.com/blog/bored-beavertail-invisibleferret-yacht-club-a-lazarus-lure-pt-2

"Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack" published by PaloaltoNetworks. #BeaverTail, #CL-STA-0237, #ITWorker, #Wagemole, #DPRK, #CTI https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/

"From Pyongyang to Your Payroll: The Rise of North Korean Remote Workers in the West" published by Zscaler. #BeaverTail, #ContagiousInterview, #InvisibleFerret, #WageMole, #DPRK, #CTI https://www.zscaler.com/blogs/security-research/pyongyang-your-payroll-rise-north-korean-remote-workers-west

"The Job Offer That Wasn’t: How We Stopped an Espionage Plot" published by SecurityScorecard. #BeaverTail, #FamousChollima, #InvisibleFerret, #DPRK, #CTI https://securityscorecard.com/blog/the-job-offer-that-wasnt-how-we-stopped-an-espionage-plot/

"北からのジョブオファー: ソフトウェア開発者を狙うContagious Interview" published by Macnica. #FamousChollima, #InvisibleFerret, #ContagiousInterview, #BeaverTail, #DPRK, #CTI https://security.macnica.co.jp/blog/2024/10/-contagious-interview.html

"Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview" published by Datadog. #BeaverTail, #ContagiousInterview, #TenaciousPungsan, #DPRK, #CTI https://securitylabs.datadoghq.com/articles/tenacious-pungsan-dprk-threat-actor-contagious-interview/

Sunset from Beavertail State Park RI #sunset #photo #Beavertail #RhodeIsland

"Bored BeaverTail Yacht Club – A Lazarus Lure" published by eSentire. #BeaverTail, #InvisibleFerret, #NPM, #DPRK, #CTI https://www.esentire.com/blog/bored-beavertail-yacht-club-a-lazarus-lure

"Contagious Interview: DPRK Threat Actors Lure Tech Industry Job Seekers to Install New Variants of BeaverTail and InvisibleFerret Malware" published by PaloaltoNetworks. #BeaverTail, #ContagiousInterview, #InvisibleFerret, #DPRK, #CTI https://unit42.paloaltonetworks.com/north-korean-threat-actors-lure-tech-job-seekers-as-fake-recruiters/

"APT Lazarus: Eager Crypto Beavers, Video calls and Games" published by Group-IB. #BeaverTail, #CivetQ, #ContagiousInterview, #InvisibleFerret, #Lazarus, #MiroTalk, #DPRK, #CTI https://www.group-ib.com/blog/apt-lazarus-python-scripts/