North Koreans Target Devs Worldwide With Spyware, Job Offers

The North Korea-based hacker group DEV#POPPER is using updated malware and social engineering to target software developers worldwide for data theft. Previously focused mainly on South Korea, the campaign has extended its reach to Europe, the Middle East, and North America. The threat group also added Linux and macOS versions to its malware repertoire. The group poses as potential employers for software developers; when someone applies, they send malware disguised as a coding package. The malware is known to steal various sensitive files, use keylogging, and perform surveillance.