What other aliases and vendor names is Contagious Interview known by?

Contagious Interview is tracked across the cybersecurity industry by multiple aliases, including: BadClone, Coral Sleet, DeceptiveDevelopment, DEV#POPPER, G1052, Gwisin Gang, NICKEL ALLEY, PurpleBravo.

What are the primary motivations and sponsors of Contagious Interview?

Contagious Interview operates from Unknown with primary motivation categorized as Espionage / Financial, sponsored or affiliated with State-sponsored / Independent.

Contagious Interview | Threat Actor Profile & Attack Matrix

Contagious Interview is a North Korea–aligned threat group active since 2023. The group conducts both cyberespionage and financially motivated operations, including the theft of cryptocurrency and user credentials. Contagious Interview targets Windows, Linux, and macOS systems, with a particular focus on individuals engaged in software development and cryptocurrency-related activities.

Contagious Interview

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (54 TTPs)

Contagious Interview

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (54 TTPs)

SHARE INTELLIGENCE WIRE