Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025
Contagious Interview campaign (BeaverTail, InvisibleFerret) · since at least December 2022 (identified November 2023)
(MSMT/2025/2, report p. 36-37) “Contagious Interview is a cyberattack campaign conducted by the DPRK cyber actors against software developers with the aim of stealing cryptocurrency wallets and web browser credentials including usernames and passwords. The Contagious Interview campaign was first identified by U.S. cybersecurity firm Palo Alto Networks in November 2023 and is believed to have been ongoing since at least December 2022. North Korean hackers impersonate prospective employers seeking software developers ... malicious code known as BeaverTail.”