PurpleBravo uses fake recruiter interviews and malicious GitHub lures to target developers; toolset includes BeaverTail and GolangGhost. Recorded Future observed 3,136 likely-target IPs and 20 victim orgs. #PurpleBravo #BeaverTail #GolangGhost https://bit.ly/4k5zXVM
North Korean hackers' PurpleBravo campaign targets 3,136 IPs via fake job interviews, compromising organizations across multiple sectors. Stay vigilant! #CyberSecurity #ThreatIntel #PurpleBravo Link: thedailytechfeed.com/north-korean...
"PurpleBravo’s Targeting of the IT Software Supply Chain" published by RecordedFuture. #BeaverTail, #ClickFix, #ContagiousInterview, #GolangGhost, #PurpleBravo, #PylangGhost, #DPRK, #CTI www.recordedfuture.com/research/purplebravos-ta...
PurpleBravo is a North Korean state-sponsored threat group tied to the “Contagious Interview” campaign. It targets software devs and crypto professionals using fake recruiters, coding tests, and ClickFix lures, delivering malware like BeaverTail and cross-platform RATs.
#PurpleBravo #NorthKorea #APT
🇰🇵 - The second report details the use of fraudulent information technology (IT) employment by North Korean threat actor #PurpleBravo to facilitate financial fraud, intellectual property theft, and espionage.
Blog: www.recordedfuture.com/research/ins...
PDF: go.recordedfuture.com/hubfs/report...
"Inside the Scam: North Korea’s IT Worker Threat" published by RecordedFuture. #BeaverTail, #ITWorker, #InvisibleFerret, #OtterCookie, #PurpleBravo, #TAG-121, #TAG-120, #DPRK, #CTI www.recordedfuture.com/research/inside-the-scam...