Fake Font - New DPRK Contagious Interview Campaign Uses Malicious VSCode Fonts

North Korea’s Lazarus Group is actively targeting developers with a rapidly evolving supply chain campaign that weaponizes VS Code’s automation features to silently deploy multi-stage malware hidden in fake font files, enabling swift cryptocurrency theft and persistent access.