The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...
A new campaign tracked as “Dev Popper” is targeting software developers with fake job interviews in an attempt to trick them into installing a Python remote access trojan (RAT). The developers are ...
No one loves being asked mid-interview to prove their chops with a short assignment: The pressure's on, the stakes are high, and the interviewer is watching you like a hawk. But according to security ...
Attackers are targeting developers with malicious Next.js repositories to perform remote code execution (RCE) and establish a persistent command-and-control (C2) channel on infected machines in a ...
Hiring managers often know by a few key questions whether a candidate truly stands out. Learning how to answer them with clarity and confidence can dramatically increase the chances of leaving a ...
Once accepted, the attackers tell developers to download a Node.js project as part of a practical test. The trojanized project on launch deploys a RAT and infostealer malware targeting all major OS ...
The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a development and delivery pipeline to drop malware. Researchers at Socket have ...
Forbes contributors publish independent expert analyses and insights. Justin Sablich is a journalist who covers career development. Job interviews and AI are two key drivers of anxiety for today’s job ...