Unmasking OtterCookie Malware in the Contagious Interview Campaign

A new malware named OtterCookie used in the Contagious Interview attack campaign, which is linked to North Korea. OtterCookie primarily targets financial gains and employs sophisticated techniques like downloading JavaScript code remotely and executing commands via Socket.IO. It can steal sensitive information, including cryptocurrency wallet keys, and clipboard data. Observations suggest it has evolved since September 2024, adding features for remote command execution and data theft, posing a significant threat to financial security.