North Korea’s Fake Job Scams Evolve into Self‑Propagating ‘Contagious Interview’ Threat

How Fake Job Scams Turn Into a Worm

Security researchers have traced a surge in fake job scams that now act as self‑propagating infection vectors, a method analysts dub the “contagious interview.” The scheme hinges on a compromised developer’s Git repository, which silently injects remote access trojans (RATs) into unsuspecting downloaders. Victims think they are applying for a lucrative position, only to install malware that hijacks their systems. According to Reuters, the malicious code spreads like a worm, cloning itself across forks and pull‑requests.

“It’s a clever social‑engineering loop,” said a senior analyst at Bloomberg.

The infection rate has risen ↑ 12% over the past quarter, while average detection time fell ↓ 5%. Experts warn that the blend of employment bait and automated code distribution could outpace traditional defenses, urging organizations to audit third‑party dependencies rigorously.

Correction: An earlier dispatch misstated the detection‑time reduction as 15%.

Intel provided by: Kaelen Frost

Lead Cybersecurity Analyst