Beware DEV#POPPER: North Korean Malware Targets Developers on Windows, Linux, and macOS!

DEV#POPPER, a North Korean-linked malware campaign, tricks software developers into downloading malware during fake job interviews. Targeting Windows, Linux, and macOS, it exfiltrates data using enhanced obfuscation and remote monitoring tools. The campaign has spread across South Korea, North America, Europe, and the Middle East.

Hot Take:

Looks like North Korea’s DEV#POPPER is popping up on everyone’s radar with a multi-OS malware buffet. It’s like they took a coding bootcamp and decided to use their newfound skills for a cross-platform hackathon. Watch out, developers; your next job interview might come with a side of malware!

Key Points:

  • DEV#POPPER targets Windows, Linux, and macOS systems.
  • Malware campaign employs advanced social engineering tactics.
  • Attack chain involves downloading a booby-trapped npm module during a fake job interview.
  • Main malware, BeaverTail, determines the OS and establishes contact with a remote server.
  • The new version includes enhanced obfuscation, AnyDesk persistence, and improved FTP data exfiltration.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here