North Korean TraderTraitor Hackers Use Fake Terraform Job Tests to Deploy macOS Backdoors

North Korean threat actors are using fake Terraform job tests to compromise macOS developers and reach cloud systems. The campaign shows how a routine coding assignment can become an entry point for data theft, remote control, and deeper network intrusion. The activity is tied to TraderTraitor, a financially motivated Lazarus subgroup also tracked as UNC4899, PUKCHONG, and Jade Sleet. It follows a major incident involving LayerZero, and investigators found an unrelated Indian IT services provider affected by the backdoors. SentinelLABS said in a report shared with Cyber Security News (CSN) that the attackers expanded their focus beyond crypto firms. The finding shows North Korean operators pursue developers, cloud...

Read the full article at the source.