BeaverTail and OtterCookie evolve with a new Javascript module

North Korea-linked threat group Famous Chollima has merged its BeaverTail and OtterCookie malware into a more sophisticated, modular JavaScript toolset—now featuring keylogging, screenshot capture, and expanded data theft capabilities—targeting job seekers through trojanized applications and malicious NPM packages.