North Korean Cyberspies Target GitHub Developers

The North Korean APT is setting up legitimate accounts on GitHub and social media platforms to pose as developers or recruiters — ultimately to fool targets into loading npm repositories with malicious code.

accounts apt code developers github malicious media north north korean north korean apt npm platforms repositories social social media social media platforms target ultimately