Contagious Interview steps outside the developer workflow

Reported 03 Sep 2026 by otx · Severity: medium

Jamf Threat Labs discovered a cluster of 14 trojanized macOS applications distributed as DMG and PKG files impersonating legitimate software like The Unarchiver, Sketch, and Bartender. These samples are linked to the Contagious Interview campaign, a DPRK-attributed operation usin