aiqbench analysis
This campaign exploits social engineering to distribute Node.js-based malware disguised as legitimate coding assessments, targeting software developers across multiple operating systems. The attack vector highlights critical vulnerabilities in supply chain security and the risks associated with unverified third-party packages within development environments.
Hackers Pose as Recruiters and Send Fake Coding Tests to Infect Software Developers
Cybercriminals are posing as recruiters to turn routine job interviews into malware traps for software developers. Their latest campaign delivers two cross-platform remote access tools, NodeRabbit and PollCat, through coding challenges that look like genuine take-home tests. The activity has reached victims in aviation, aerospace and financial technology across Egypt, Ethiopia and Afghanistan. It also […] The post Hackers Pose as Recruiters and Send Fake Coding Tests to Infect Software Developers appeared first on Cyber Security News.
Cybercriminals are posing as recruiters to turn routine job interviews into malware traps for software developers. Their latest campaign delivers two cross-platform remote access tools, NodeRabbit and PollCat, through coding challenges that look like genuine take-home tests. The activity has reached victims in aviation, aerospace and financial technology across Egypt, Ethiopia and Afghanistan. It also shows how a seemingly ordinary project download can give attackers a foothold on a developer workstation, where source code, cloud credentials…
Excerpt shown under the publisher's RSS terms · 76 words · full text and figures are on the publisher's site
Related coverage
14 Fake macOS Installers Linked to DPRK Campaign Deliver Credential-Stealing RAT
Cybersecurity News · Sep 4, 2026
North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto
Cybersecurity News · Sep 21, 2026
Fake Recruiters Target Web3 Developers Through Trusted Bitbucket and npm Workflows
Cybersecurity News · Jul 29, 2026
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
METR · Aug 26, 2026