Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
Summary
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. "Any user who ran the project ended up with a four-stage payload aligned with OTTERCOOKIE: a browser credential and crypto wallet stealer, a file stealer, a
Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.