Contagious Interview campaign (fake job interviews of IT engineers)

Date (as written): active since 2022 (per Unit42)
Year: 2022
Actors (as written): FAMOUS CHOLLIMA (allegedly; unclear whether a Lazarus subgroup)
Actor pages: FAMOUS CHOLLIMA
Tags (as written): social engineering; crypto theft; IT workers

Source entries (1)

JPCERT/CC Eyes blog: Practical Challenges of Attribution in the Case of Lazarus's Subgroup

Contagious Interview campaign (fake job interviews of IT engineers) · active since 2022 (per Unit42)

The attackers contact IT engineers pretending to request job interviews. It was first reported by Unit42 in November 2023 [24] , and according to the company, the campaign has been active since 2022.

https://blogs.jpcert.or.jp/en/2025/03/classifying-lazaruss-subgroup.html

Suggest a correction on GitHub