The Contagious Interview campaign abusing VSCode distributed via GitHub.

North Korea-linked attackers are conducting the ‘Contagious Interview’ campaign on a large scale. They abuse GitHub, VSCode automation features, and generative AI. They impersonate recruiters and developers, and use open-source projects to steal sensitive information such as browser accounts and cryptocurrency wallets.