North Korea’s Lazarus APT Evolves Developer-Recruitment Attacks

“Operation 99” uses job postings to lure freelance software developers into downloading malicious Git repositories. From there, malware infiltrates developer projects to steal source code, secrets, and cryptocurrency.