North Korean attackers are using LinkedIn to target developers in a fake job recruitment operation that delivers malware, Google’s Mandiant reports. The operation sends a Python coding challenge containing COVERTCATCH malware, with the aim of compromising a target’s macOS system. Similar operations have been observed delivering other malware families, including RustBucket and KANDYKORN.
International cooperation: PlugX malware deleted from US computers
The FBI and the US Department of Justice have remotely removed the PlugX malware from over 4,200 computers in the US, according to an official
