“The fake recruiter contacted the victim via LinkedIn Messaging, a feature within the LinkedIn professional social networking platform, and sent two coding challenges required as part of a hiring process, which the victim downloaded and executed on a company device.”
North Korea’s Lazarus got into a Spanish aerospace company by posing as a Meta recruiter on LinkedIn. The coding challenges were a “Hello, World!” and a Fibonacci printer that delivered a new backdoor ESET calls LightlessCan, built to dodge security monitoring. The victim ran a job interview test on a work machine. Every company that makes candidates download take-home tests trained its staff to do exactly that.