Think That Job Offer Is Real? North Korean Hackers Are Hiring Devs Just to Hack Them

Man, North Korean hackers are going completely wild right now. Agencies from the US, Japan, Germany, and Australia just dropped a massive alert about this campaign called Contagious Interview, and honestly, the numbers are insane. They have already infected over 30000 devices across more than 100 countries, drained over 7000 crypto wallets, and pocketed nearly 11 million bucks.

If you are a dev, web designer, or crypto engineer, you are pretty much their prime target. They hit you up on LinkedIn pretending to be recruiters offering these dream, high-paying jobs. You think you are just doing a routine coding test or assessment, but boom, you download their file and your machine gets loaded with nasty malware like BeaverTail or InvisibleFerret. Once they are inside your laptop, they do not just steal your crypto. They use your access to creep into your company network, swipe IP, and even steal your identity pictures to set up fake profiles.

What is even wilder is how these North Korean IT workers are expanding their game. They are literally running laptop farms in the US and Japan, using AI to generate fake identities, and now they are recruiting proxies on Discord. They offer people in the US, Europe, and Latin America a 35 percent cut of a dev salary just to show their face on video calls and handle the non-technical comms. While the proxy pretends to do the interview or the live coding challenge, the hacker remotes in, does all the heavy lifting, and takes home the other 65 percent to bypass global sanctions. It is pure madness out there.

TL;DR: North Korean hackers are posing as recruiters on platforms like LinkedIn and Discord, offering lucrative fake jobs to devs and Web3 specialists. Once targets open a "coding test," malware infects their machines, allowing hackers to drain crypto wallets, steal company data, and hijack identities. They are even paying foreign proxies a cut to sit in on video interviews to bypass hiring restrictions and fund their regime.