Contagious Interview is a North Korea-aligned threat group, also known by aliases such as DeceptiveDevelopment, Gwisin Gang, TAG-121, DEV#POPPER, PurpleBravo, Tenacious Pungsan, and Famous Chollima. This group has been active since at least 2022, primarily engaging in financially motivated operations, including cryptocurrency theft and credential harvesting, with a secondary objective of cyber espionage. The group distinguishes itself through highly elaborate social engineering tactics, often impersonating recruiters or HR personnel on platforms like LinkedIn, GitHub, and various job boards to lure software developers and IT professionals. They utilize artificial intelligence tools to create realistic fake personas and clone video conferencing applications, and uniquely monitor cyber threat intelligence platforms to understand reporting on their infrastructure. Unlike traditional ransomware groups, Contagious Interview focuses on intellectual property theft and persistent access for st

Aliases del actor

Gwisin GangDeceptiveDevelopmentTAG-121DEV#POPPERPurpleBravoTenacious Pungsan

Actores similares

devmanransomware · 184tag-22actor · 1Network Devicesactor · 1Compromise Software Dependencies and Development Toolsactor · 1Local Data Stagingactor · 1Device Driver Discoveryactor · 1CS FQL: 32. Detect Data Exfiltration via external storage devicesactor · 1dev-0322actor · 1yanbian-gangactor · 1dev-0343actor · 1

Paises afectados

Sectores atacados