News and Analysis

North Korean threat actors have reportedly used a social engineering tactic, ClickFix, and fake job offers to infect job-seekers’ systems with a backdoor named GolangGhost. This campaign was named ‘ClickFake Interview’ by French cybersecurity firm, Sekoia. The group has mainly targeted centralized finance entities, in a shift from previous attacks on decentralized finance institutions. They use fake job interviews through LinkedIn or X to trick people into downloading malware, which can steal cryptocurrency and sensitive data.