New North Korean campaign uses fake coding interviews to steal developer credentials

Author(s): Daniel Stepanic
Organization: Elastic

Open article directly Open article on Archive.org

2026-09-01 ⋅ Elastic ⋅ Daniel Stepanic, Jia Yu Chan, Salim Bitam
REVSTEALER ramps up: analysis of up-and-coming infostealer
RevStealer

2026-07-16 ⋅ Elastic ⋅ Cyril François
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains
TELEPUZ

2026-06-19 ⋅ Elastic ⋅ Daniel Stepanic
Lost in relocation: analysis of a new loader distributing CASTLESTEALER
CASTLESTEALER

Propose Change New North Korean campaign uses fake coding interviews to steal developer credentials