SecurityScorecard Contagious Interview October 2024

Contagious Interview has obfuscated JavaScript code using Base64 and variable substitutions.

Contagious Interview has exfiltrated data from a compromised host to actor-controlled C2 servers.

Contagious Interview has distributed malicious files requiring direct victim interaction to execute through the guise of a code test.

Contagious Interview has downloaded remote management and monitoring software such as “AnyDesk” for post compromise activities.

Contagious Interview has used fake job advertisements and messages sent via social media to spearphish targets. Contagious Interview has also leveraged hiring websites to solicit victims.

Contagious Interview has created fake social media accounts such as LinkedIn and Telegram accounts for their targeting efforts.

Contagious Interview has used remote management and monitoring software such as “AnyDesk”.

Contagious Interview has researched specific professional groups such as software developers for targeting. Contagious Interview has also researched individuals who work in roles related to cryptocurrency and blockchain technologies.

Contagious Interview had identified and solicited victims through social media such as LinkedIn, X, and Telegram.

Contagious Interview has hosted malicious payloads on code repositories used as lures for victims to download.

Contagious Interview had impersonated HR hiring personnel through social media, job board notifications, and conducted interviews with victims in order to entice them to download malware disguised as legitimate applications or malicious scripts from code repositories.