Multiple organizations in the cryptocurrency sector · 24/10/2024
Researchers at Datadog discover three malicious packages published to the npm registry found to contain the known malware BeaverTail, a JavaScript downloader and information stealer linked to an ongoing North Korean campaign tracked as Contagious Interview. [Date Occurred: Since at least 11/09/2024; Date Discovered: 11/09/2024]
Tenacious Pungsan: A DPRK threat actor linked to Contagious Interview · 2024-10-24T00:00:00Z
These packages had a combined 323 downloads and contained samples of BeaverTail malware, a family of JavaScript infostealers and downloaders used by threat actors associated with Democratic People’s Republic of Korea (DPRK, also referred to as North Korea). ... Reporting from Palo Alto Networks Unit 42 has associated BeaverTail with an ongoing campaign named Contagious Interview, which targets job-seekers in the US tech industry. ... Datadog Security Research has linked the samples presented in this blog to Contagious Interview and attributes them to a single threat actor which we designate “Tenacious Pungsan.”