North Korean Cyberspies Target GitHub Developers
The North Korean APT is setting up legitimate accounts on GitHub and social media platforms to pose as developers or recruiters — ultimately to fool targets into loading npm repositories with malicious code.
Source: darkreading.com
