INCIDENT EVIDENCE GRAPH

New North Korean campaign uses fake coding interviews to steal developer credentials

2026-07-18T00:00:00Z

DPRK-aligned hackers hid malware inside SVG flag images to backdoor developer job interview coding tests. Not one antivirus vendor caught it.

• Victim: developer job interview candidates
• Actor: DPRK-aligned hackers
• Method: Fake coding interviews; malware hidden in SVG flag images; backdoored developer job interview coding tests

Primary evidence

1. New North Korean campaign uses fake coding interviews to steal developer credentials

中文