PurpleBravo uses fake recruiter interviews and malicious GitHub lures to target developers; toolset includes BeaverTail and GolangGhost. Recorded Future observed 3,136 likely-target IPs and 20 victim orgs. #PurpleBravo #BeaverTail #GolangGhost https://bit.ly/4k5zXVM
"PurpleBravo’s Targeting of the IT Software Supply Chain" published by RecordedFuture. #BeaverTail, #ClickFix, #ContagiousInterview, #GolangGhost, #PurpleBravo, #PylangGhost, #DPRK, #CTI www.recordedfuture.com/research/purplebravos-ta...
And everything is hosted on a single platform. At the end of the process, you're politely asked to download a 'driver' to magically make your webcam work ✨
Spoiler alert: it's not a driver, it's #GolangGhost, a custom malware with remote access capabilities.
6/ These prompt users to run PowerShell/curl commands, dropping the #GolangGhost backdoor. Watch out for lures impersonating giants like #Coinbase or #Kraken. Sekoia has shared #YARA rules – definitely worth checking out.
ClickFake Interview è la nuova campagna Lazarus che usa falsi colloqui per infettare utenti crypto con il malware GolangGhost.
#ClickFakeInterview #criptovalute #cyberspionaggio #evidenza #FrostyFerret #GolangGhost #guerracibernetica #lazarus #malware
www.matricedigitale.it/sicurezza-in...
ClickFake Interview è la nuova campagna Lazarus che usa falsi colloqui per infettare utenti crypto con il malware GolangGhost.
#ClickFakeInterview #criptovalute #cyberspionaggio #evidenza #FrostyFerret #GolangGhost #guerracibernetica #lazarus #malware
www.matricedigitale.it/sicurezza-in...
ClickFake Interview è la nuova campagna Lazarus che usa falsi colloqui per infettare utenti crypto con il malware GolangGhost.
#ClickFakeInterview #criptovalute #cyberspionaggio #evidenza #FrostyFerret #GolangGhost #guerracibernetica #lazarus #malware
www.matricedigitale.it/sicurezza-in...
"From Contagious to ClickFake Interview: Lazarus leveraging the ClickFix tactic" published by SEKOIA. #ClickFix, #ContagiousInterview, #GolangGhost, #Lazarus, #FrostyFerret, #DPRK, #CTI blog.sekoia.io/clickfake-interview-camp...
🇰🇵 Sekoia #TDR team investigated a malicious campaign that employs fake job interview websites to deliver backdoors on Windows and macOS - #GolangGhost using #ClickFix tactic. Dubbed #ClickFake Interview, this campaign has been attributed to #Lazarus APT
blog.sekoia.io/clickfake-in...
