Fake recruiter coding tests target devs with malicious Python packages · 2024-06
Fake recruiter coding tests target devs with malicious Python packages
https://www.reversinglabs.com/blog/fake-recruiter-coding-tests-target-devs-with-malicious-python-packages
Python developers · 10/09/2024
Researchers from ReversingLabs reveal that members of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware, as part of the VMConnect campaign. [Date Occurred: 'Recently'; Date Discovered: 'Recently']
Fake recruiter coding tests target devs with malicious Python packages (VMConnect) · 2024-09-10T05:00:00.000Z
ReversingLabs researchers have identified new, malicious software packages believe to be linked to a campaign, VMConnect, that our team first identified in August 2023 and which has ties to the North Korean hacking team Lazarus Group. ... Furthermore, information gathered from the detected samples allowed us to identify one compromised developer and provided insights into an ongoing campaign, with attackers posing as employees of major financial services firms.