SYMBOLCOMMON_NAMEaka. SYNONYMS
js.otter_cookie (Back to overview)

OtterCookie

Actor(s): WageMole

There is no description at this point.

References
2026-09-17 ⋅ OpenSourceMalware ⋅ Paul McCarty
WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
BeaverTail OtterCookie BeaverTail Beavertail
2026-09-03 ⋅ Jamf Blog ⋅ Jamf Threat Labs
Contagious Interview steps outside the developer workflow
OtterCookie
2026-07-17 ⋅ Elastic ⋅ Daniel Stepanic
New North Korean campaign uses fake coding interviews to steal developer credentials
OtterCookie
2026-06-30 ⋅ JFrog Security ⋅ Yair Benamou
Lazarus-Linked npm Malware Masquerades as Rollup Polyfills
OtterCookie
2026-05-05 ⋅ Red Asgard ⋅ Red Asgard
Hunting Lazarus Part VII: The Server That Was Not Just FTP
BeaverTail OtterCookie
2026-04-22 ⋅ Expel ⋅ Marcus Hutchins
Inside Lazarus: How North Korea uses AI to industrialize attacks on developers
BeaverTail OtterCookie InvisibleFerret HexagonalRodent
2026-04-21 ⋅ Trend Micro ⋅ Lucas Silva
Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories
BeaverTail JADESNOW OtterCookie InvisibleFerret
2026-04-03 ⋅ Panther ⋅ Michael Baker
jsonspack: Multi-Tenant Node.js RAT — DPRK Supply Chain Campaign
OtterCookie
2026-03-11 ⋅ Microsoft ⋅ Microsoft Defender Experts, Microsoft Defender Security Research Team
Contagious Interview: Malware delivered through fake developer job interviews
BeaverTail OtterCookie StoatWaffle InvisibleFerret PylangGhost GolangGhost Contagious Interview
2026-03-06 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
AI as tradecraft: How threat actors operationalize AI
OtterCookie
2026-02-19 ⋅ GitLab ⋅ Oliver Smith
GitLab Threat Intelligence Team reveals North Korean tradecraft
BeaverTail OtterCookie Contagious Interview
2025-11-13 ⋅ NVISO Labs ⋅ Bart Parys, Efstratios Lontzetidis, Stef Collart
Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery
BeaverTail OtterCookie InvisibleFerret Beavertail TsunamiKit
2025-10-20 ⋅ Medium Deriv-Tech ⋅ Shantanu Ghumade
How a fake AI recruiter delivers five staged malware disguised as a dream job
BeaverTail OtterCookie InvisibleFerret
2025-10-16 ⋅ Cisco Talos ⋅ Michael Kelley, Vanja Svajcer
BeaverTail and OtterCookie evolve with a new Javascript module
BeaverTail OtterCookie InvisibleFerret
2025-10-15 ⋅ David Dodda ⋅ Dvaid Dodda
How I Almost Got Hacked By A 'Job Interview'
OtterCookie
2025-10-06 ⋅ BlackPoint ⋅ Caden Toellner, Nevan Beal, Sam Decker
Malicious Node Package Deploys OtterCookie
OtterCookie
2025-09-25 ⋅ ESET Research ⋅ Matěj Havránek, Peter Kálnai
DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception
BeaverTail OtterCookie InvisibleFerret PylangGhost AkdoorTea GolangGhost Tropidoor TsunamiKit
2025-09-25 ⋅ Virus Bulletin ⋅ Matěj Havránek, Peter Kálnai
DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception
BeaverTail OtterCookie InvisibleFerret PylangGhost AkdoorTea GolangGhost Tropidoor TsunamiKit
2025-09-17 ⋅ GitLab ⋅ GitLab
Tech Note - BeaverTail variant distributed via malicious repositories and ClickFix lure
BeaverTail OtterCookie BeaverTail InvisibleFerret Beavertail GolangGhost
2025-09-10 ⋅ ANY.RUN ⋅ ANY.RUN
Lazarus Group Attacks in 2025: Here’s Everything SOC Teams Need to Know
OtterCookie InvisibleFerret PylangGhost
2025-08-27 ⋅ Anthropic ⋅ Anthropic
Anthropic - Threat Intelligence Report: August 2025
BeaverTail OtterCookie GolangGhost InvisibleFerret GolangGhost
2025-07-30 ⋅ GBHackers on Security ⋅ Lucas Mancilha
Lazarus Group enhances malware delivery by using new techniques
OtterCookie
2025-06-03 ⋅ ANY.RUN ⋅ ANY.RUN
OtterCookie: Analysis of Lazarus Group Malware Targeting Finance and Tech Professionals
BeaverTail OtterCookie InvisibleFerret
2025-05-08 ⋅ NTT Security ⋅ Masaya Motoda, Rintaro Koike
Additional Features of OtterCookie Malware Used by WaterPlum
OtterCookie WageMole
2025-05-07 ⋅ NTT Security ⋅ Masaya Motoda, Rintaro Koike
Additional Features of OtterCookie Malware Used by WaterPlum
BeaverTail OtterCookie InvisibleFerret
2025-04-24 ⋅ Silent Push ⋅ Silent Push
Contagious Interview (DPRK) Launches a New Campaign Creating Three Front Companies to Deliver a Trio of Malware: BeaverTail, InvisibleFerret, and OtterCookie
BeaverTail OtterCookie FrostyFerret GolangGhost InvisibleFerret GolangGhost
2025-04-11 ⋅ Bitso Quetzal Team ⋅ Mauro Eldritch
Interview with the Chollima
BeaverTail OtterCookie InvisibleFerret
2025-04-04 ⋅ Cyber and Ramen ⋅ Cyber and Ramen
OtterCookie Expands Targeting to AI Coding Tools: Analysis of a Trojanized npm Campaign
OtterCookie
2025-02-13 ⋅ Recorded Future ⋅ Recorded Future
Inside the Scam: North Korea’s IT Worker Threat
BeaverTail OtterCookie InvisibleFerret
2025-01-16 ⋅ NTT Security ⋅ Masaya Motoda, Rintaro Koike, Ryu Hiyoshi
OtterCookie, new malware used in Contagious Interview campaign
OtterCookie
2024-12-24 ⋅ ⋅ NTT Security Holdings ⋅ NTT Security Holdings
Contagious Interview Uses New Malware Otter Cookie
BeaverTail OtterCookie InvisibleFerret

There is no Yara-Signature yet.