JSON services hijacked by North Korean hackers to send out malware

Digital crime by an anonymous hacker.

• Lazarus Group used JSON storage services to host malware in the Contagious Interview campaign targeting developers
• Attackers lured victims via fake LinkedIn job offers, delivering BeaverTail, InvisibleFerret, and TsunamiKit malware
• Malware exfiltrates data, steals crypto, and mines Monero—while blending into normal dev workflows

North Korean state-sponsored threat actors, part of the infamous Lazarus Group, have been seen hosting malware and other malicious code on JSON storage services.