According to Digital Asset, the security platform OpenSourceMalware revealed in a program on October 21st that a North Korean affiliated hacker group used a tactic called Contagious Interview to lure job seekers in the cryptocurrency industry, contacting them through LinkedIn and inviting them to access a private code repository and install software packages required for development tasks. Attackers set the. npmrc configuration file in the repository, allowing npm to download dependencies from a specified external package repository instead of a public registry, which could potentially execute malicious code during installation and reduce the probability of being detected by public security scans. Paul McCarty, co-founder of OpenSourceMalware, has recently observed attackers using such tactics. At present, the specific number of victims, affected companies, or the amount of digital asset losses have not been disclosed. https://www. (wublock123.com)/news/security-research-north-korean-hackers-use-encrypted-recruitment-as-bait-to-launch-contagious-interview-attack-70591