“Contagious Interview” Targets macOS with FlexibleFerret Malware

Red | Attack Report
Download PDF

The macOS Ferret malware, linked to North Korean threat actors, targets job seekers and developers through the “Contagious Interview” campaign using fake software installations. A new variant, FlexibleFerret, evades Apple’s XProtect and gains persistence by masquerading as legitimate system processes. Attackers are expanding their tactics, using GitHub to distribute malware, emphasizing the need for enhanced security vigilance.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox