UN Panel of Experts S/2024/215
Fake employers luring software developers to install malware from GitHub through job interviews
Para 139: “In another report a campaign was discovered in which Democratic People’s Republic of Korea actors posed as employers to lure software developers, many linked to the cryptocurrency industry, into installing malware hosted on a GitHub repository through a job interview process (see figure XXIV and para. 132).” (figure XXIV source: Palo Alto Unit 42, “two campaigns by north korea bad actors target job hunters”)