INCIDENT EVIDENCE GRAPH

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

2026-09-18T17:00:16Z

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

• Victim: A DevOps engineer
• Actor: North Korean operators
• Method: Job interview lures delivered malware via Terraform lock files

Primary evidence

1. Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

中文